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CHAPTER I 


INTRODUCTION 


1 . 1 Summary 

This report represents the results of studies at the MIT 
Measurement Systems Laboratory which were undertaken to contribute 
to the design of digital flight control systems, particularly for 
transport aircraft. In this chapter the overall design considerations 
for a digital flight control system are discussed. The design areas 
chosen for study are presented and the contents of the succeeding 
chapters are outlined. 

1.2 Design Considerations for a Digital Flight Control System 

The basic function of a flight control computer is to stabilize 
and control the attitude and flight path of an aircraft by processing 
sensor data to generate commands for control surface actuators and 
throttles. In addition, the computer must perform several supervisory 
functions. First, it must adjust the stabilization and control data 
processing algorithm to fit existing flight conditions and the flight 
control task being executed. Second, it must monitor flight control 
system performance and switch from primary to backup modes of 
operation in case of subsystem failures. Finally, the computer must 
interact with the pilot through suitable switches and displays in 
order to communicate to him the flight control system status and 
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allow him to select the mode of operation which he desires. 

For the basic stabilization and control data processing task, 
the bandwidth easily obtained with digital computation is narrower 
than the bandwidth easily obtained with analog computation. The 
bandwidth of a digital computer is limited by the times it requires 
to carry out additions and multiplications and reducing these times 
usually incurs relatively large penalties in weight, power consumption 
and dollar cost. Since a digital computer samples its inputs period- 
ically rather than reading them continuously, digital control is 
subject to the phenomena of aliasing in which signals whose fre- 
quencies are near a multiple of the sampling frequency are indis- 
tinguishable from low frequency signals. Limited bandwidth and 
aliasing are relatively minor problems since the bandwidths of modern 
flight rated digital computers are adequate for most aircraft 
stabilization and control tasks and the effects of aliasing can 
usually be eliminated by passing the sensor signals through low pass 
filters before sending them to the computer. The major advantage of 
digital over analog computation for the stabilization and control 
task is the ease with which the computational algorithm can be 
altered to meet changing requirements during a flight. 

It is in the performance of supervisory functions that digital 
computation is most advantageous. The extreme flexibility of a general 
purpose digital computer in performing supervisory tasks makes it 
much better suited to these tasks than the special purpose switching 
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circuits employed in conjunction with analog computation. 

Certain factors have tended to limit the use of digital flight 
control systems. Present day flight rated computers are quite complex 
and provide more computational power than is required in simple 
flight control systems. Since increased complexity brings with it 
higher cost and lower reliability, digital computation is not eco- 
nomical for flight control systems below a certain level of 
sophistication. Furthermore, although digital computers themselves 
are highly developed, the interface between the digital computer 
and the sensors and actuators and the aircraft electrical environment 
has not received nearly as much design attention and its design in- 
volves some risk. 

Uniform standards for signal formats within flight control 
systems have not yet been achieved. As an example, the F-106 airborne 
digital computer communicates with other avionics system components 
via signals in the following formats: 

High Voltage A-C Analog 
High Voltage D-C Analog 
Low Voltage D-C Analog 
Time Duration Between Pulses 
Thirteen Bit Parallel Digital 
Discrete (on-off) 

Somewhere in the flight control system, the signals external to the 
computer must be converted to the parallel digital format employed in 
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the computer and these external signals must be accessed by the 
parallel digital input-output addresses employed in the computer. 
Signal transmission external to the computer must be carried out in 
the relatively noisy electrical environment of the aircraft with its 
v poorly regulated power line voltages, high potential for ground loops 
and high radiation intensity from vhf communication and radar equip- 
ment. Although many signals could remain in digital form throughout 
the flight control system, if for example digital encoders were 
employed as the mechanical to electrical conversion elements in 
sensors and stepper motors were used to drive control surface 
actuators, some signal formating electronics will be required in any 
digital flight control system. 

Several hardware configurations have been proposed for handling 
the interface between the digital computer and the remainder of the 
flight control system. One method is to employ a centralized interface 
unit which converts all signals external to the computer to and from 
a parallel digital format and exchanges these signals with the 
computer via parallel digital data and address lines. Another approach 
is to employ a minimal interface unit at the computer and extend the 
computer input-output data and address lines throughout the aircraft. 
Although the data and address signals might be changed from parallel 
to serial digital formats as they leave the computer, they would 
receive a minimum amount of processing at this point and each sub- 
system communicating with the computer would have its own interface 
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unit at its own location. These interface units would include address 
circuitry to determine which unit was being called by the computer 
and whatever signal formating electronics is required by the sub- 
system being served by a particular unit. A third alternative is to 
employ a multiplexing system to transmit most or all of the flight 
control system signals over a common wire in a format designed for 
noise tolerance and tolerance of aircraft wiring failures. Since 
this signal format would not necessarily be compatible with the 
signals employed inside the computer and the other flight control 
subsystems, interface units would be required both at the computer 
and at the locations of the other subsystems (i.e., sensors and 
actuators). 

The choice between the first and second alternatives is not 
clear cut since similar interface circuits are employed in both 
cases, the primary difference being their location in the system. 

Some capability for expansion should be provided and this depends 
on providing spare input-output addresses in the computer and, in 
the centralized interface alternative, on leaving space for more 
circuit cards in the interface unit and installing spare wires in 
the aircraft. In the second alternative, in which the digital data 
and address lines are extended throughout the aircraft, Information 
is transmitted as short duration pulses and electrical problems can 
arise because of reflections at discontinuities in the lines and 
susceptibility to noise. However, whenever a large volume of data is 
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to be transmitted over a few wires, wide bandwidth circuits are re- 
quired and reflections and noise may be problems. Therefore these 
problems are not limited to this particular system configuration. 

In determining the digital computer configuration to be employed 
in a flight control system, two alternatives are possible - federated 
and integrated systems. In a federated system, two or more separate 
digital computers with different primary tasks are employed, while in 
an integrated system one central computation unit performs all 
computational tasks. In a federated digital flight control system, 
air data computation might be performed by a separate small digital 
computer, a separate computer might be used for pilot display 
generation while a third computer executes the stabilization and con- 
trol and supervisory functions. The use of more than one digital 
computer is costly in weight, power and dollars and is difficult to 
justify unless the data processing or reliability requirements are 
beyond the capability of a single computer. Even in this case, a 
multiprocessor in which several central processors (arithmetic units) 
address the same memory or a central computer complex containing 
several computers provides a more flexible system. 

Considering the entire aircraft avionics system, rather than 
just the. flight control subsystem, the choice between a federated 
or an integrated system takes on a new aspect. Other avionics 
system tasks which might involve digital computation include navi- 
gation and system status and maintenance checks. The use of a 
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federated system, in which one computer is dedicated to the flight 
control task and a second computer performs the other tasks, protects 
the flight control subsystem from interference by other subsystems 
both at the programming and operating levels. Since in a federated 
system, the other computations would not have direct access to the 
memory of the computer performing flight control computations, it 
would be difficult for the other computations to insert bad data 
into the flight control computations or to trap the central pro- 
cessor used for flight control computations and prevent it from 
executing the flight control program. During computer program 
preparation, the limited possibilities of interaction between the 
flight control program and other programs with a federated system 
would make program checkout and verification easier and would ease 
the problem of delegating programming responsibility. On the other 
hand, if the flight control computer has excess capacity, it is 
economically attractive to employ the integrated system concept and 
have the flight control computer perform other functions. 

The large data processing capability available with a digital 
flight control computer allows the use of simpler flight control 
sensors. Thus, the mechanical computational elements in the air 
data computer may be eliminated and body mounted rather than gimballed 
gyros may be employed to sense aircraft attitude. 

For automatic landing of transport aircraft, analog autopilots 
employ redundant autopilot computers as well as redundant sensors 
and actuators to meet reliability requirements. With present digital 
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equipment reliability. It is clear that a digital autopilot must also 
employ redundant computers in the autoland application. The ability 
of the general purpose digital computer to reorganize its computations 
to meet the requirements of changing system status should be most 
useful In this area. 

1.3 Design Areas Chosen for Study 

In this report the results of studies leading to the design of 
a digital flight control system are presented. From the aspects of 
digital flight control system design outlined above, certain areas 
were selected for study. It was hoped that these areas would be of 
pivotal importance and would be relatively invariant from one flight 
control application to another. These areas were the feasibility of 
performing the basic attitude and flight path stabilization and control 
function with a digital computer, how the presence of a digital 
computer. would affect the choice of flight control system sensors 
and the structuring of the digital computer system to provide tolerance 
to computer failures. 

To study digital stabilization and control, an extensive flight 
simulation was set up on a hybrid computer and digital flight control 
simulation results were obtained for a KC-135 aircraft. The question 
of the impact of digital computation on flight control sensors was 
attacked by studying the case of attitude sensors in detail. 

Since this study was not primarily concerned with the electronic 



design of a digital flight control system, some of the important 
design areas mentioned above such as the interface between the 
digital computer and the rest of the flight control system were not 
considered in detail. 

1.4 Outline of Following Chapters 

Chapter 2 treats the problem of sensor selection for a digital 
flight control system by considering the case of the aircraft 
attitude sensors. Along with the air data sensors, the attitude 
sensors provide an area in which flight control system complexity 
and cost can be reduced by eliminating mechanical computational 
elements and routing the signals from the basic sensors directly to 
the main flight control computer. The basic quantity measured by all 
gyro attitude instruments is angular velocity. In conventional flight 
control systems, some gyros are employed to stabilize gimballed 
platforms from which the attitude (Euler angles) of the aircraft 
is determined by measuring shaft angles. In a digital flight control 
system, the computational capability is available to carry out the 
computation relating angular velocity to Euler angles numerically 
allowing all the gyros to be mounted directly on the airframe and 
eliminating the gimballed platforms. Mounting the gyros directly on 
the aircraft body also simplifies the problem of providing redundant 
attitude information to enhance reliability for critical flight 
control tasks such as automatic landing. The problem of detecting 
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and identifying failed instruments within a set of body mounted 
gyros or accelerometers is investigated and a configuration of in- 
struments which facilitates failure detection and identification is 
proposed. The interaction between the aircraft attitude computations 
and the stabilization and control function of a flight control system 
is also discussed. This interaction occurs because the longitudinal 
and lateral acceleration sensors employed to provide long term 
attitude information provide an unwanted feedback path around the 
autopilot. Finally, several attitude sensor configurations for a 
digital flight control system are suggested. 

Chapter 3 investigates the design of the digital computer 
system for a digital autopilot where very high reliability is re- 
quired. Very high reliability is required for automatic landing and 
in other transport operations to the extent that safety of flight 
depends on the operation of the automatic flight control system. 

For flight control system applications requiring more reliability 
than is provided by a single computer operating without backup, 
various multiple computer configurations are examined, and a three 
computer configuration providing fail-operational/fail-passive 
operation is recommended . 

Chapter 4 is concerned with the design of data processing 
algorithms for aircraft attitude and flight path stabilization and 
control. Algorithms for control of a KC-135 aircraft for several 
cruise flight conditions are obtained. The autopilot modes imple- 
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merited are altitude hold, heading hold and control wheel steering. 
The control algorithms were found by root locus techniques assuming 
that autopilot operation was continuous rather than sampled. The 
continuous control algorithms were then converted to sampled data 
algorithms with the same frequency response at low frequencies. 

The autopilot algorithms were tested with the flight simulation 
described in Chapter 5 and recordings of the simulated aircraft/ 
autopilot responses are presented. A sampling rate of twenty samples 
per second was employed with the control algorithms and no adverse 
effects due to sampling were noted. 


The authors wish to acknowledge the support given them by 
the Charles Stark Draper Laboratory of M.I.T. in providing computer 
time in the Hybrid Computer Facility and also in providing basic 
computer programming for the study of the stability of digital feedback 
systems . 
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CHAPTER II 


DESIGN OF THE AIRCRAFT ATTITUDE 
REFERENCE SYSTEM 


2.1 Introduction 

The function of the attitude reference system is to provide the 
autopilot with the aircraft attitude, that is heading, pitch and roll 
angles and the aircraft attitude rates, yaw, pitch and roll rate. The 
autopilot may also require the components of aircraft linear accelera- 
tion and, since the attitude reference system contains linear accelero 
meters which aid it in performing its primary function, the function 
of determining aircraft linear acceleration will also be assigned to - 
the attitude reference system in this report. 

The attitude reference system design for a digital autopilot will 
differ from the design for a conventional analog autopilot 
because the large data processing capability of the digital system 
opens up the possibility of eliminating the normal gimbaled attitude 
sensors, that is the vertical gyro, directional gyro and/or gyro 
stabilized platform, with a resulting saving in cost and improvement 
in reliability. The increased data processing capability also allows 
the use of more sophisticated techniques for detecting and isolating 
failed attitude reference sensors. 

The attitude reference system contains the following sensors’, 
gyros to provide attitude rate and short-term attitude information, 
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a fluxgate compass to provide long-term heading information, and ac- 
celerometers to sense gravity and thus provide long-term pitch and 
roll information as well as providing aircraft linear acceleration. 

The rate gyros, which provide attitude rate information, must 
be mounted on the aircraft body; that is, they axe not gimbaled. 

However, there are two alternatives for mounting the gyros which sense 
aircraft attitude. In the first alternative the attitude gyros 
are mounted on gimbals, either employing two- degree- of- freedom gimbal 
systems as in a vertical gyro and a directional gyro, or employing a three- 
gimbal or four-gimbal stabilized platform. The second alternative 
consists of integrating the outputs of the body mounted rate gyros 
in the autopilot digital computer to determine the rotation matrix 
relating a fixed reference frame to the aircraft body coordinate 
frame. This rotation matrix contains the same information as would 
be obtained from the gimbal angles of gimbaled attitude gyros, and 
the second alternative is thus equivalent to the first from the 
standpoint of satisfying autopilot attitude information requirements. 

Gimbaled attitude gyros simplify the data processing problem since 
the high-frequency attitude computations are carried out mechanically by 
the gimbals rather than by the digital computer. The - primary factor deter- 
mining the short-term accuracy of attitude determination is the drift rate 
of the gyros employed. Drift rate in turn is primarily a function of the 
cost of the gyros and is not materially affected by whether they are employed 
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as attitude or rate gyros. However, gimbaled gyros are not subjected 
to the high aircraft angular velocities which are applied to body- 
mounted gyros, and thus a given gyro will provide somewhat better 
performance in the gimbaled mode than in the body- mounted mode of 
operation. 

The advantages of the body-mounted gyro mode of attitude deter- 
mination are flexibility and simplicity of the sensor system, which in 
turn facilitates implementation of redundancy for assurance of high 
reliability. Flexibility is provided by the. body -mounted gyro 
mode of operation in the sense that the basic short-term attitude 
information provided by any gyro is attitude rate. If this informa- 
tion is provided directly to the computer, it can be processed in any 
way which is desired for a given autopilot mode, whereas, if gimbals 
are employed, the rate to attitude computation is done in a fixed 
way by the gimbals and cannot be changed. If the body-mounted gyro 
attitude determination mode is employed, the artificial horizon dis- 
plays must be driven by the autopilot digital computer, placing a 
safety of flight requirement on the computer. 

For subsonic flight the autopilot does not require highly 
accurate attitude and attitude rate information, accuracies on the 
order of one half degree for attitude angles and a tenth of a degree 
per second for attitude rate being acceptable. Thus, for the purpose 
of providing information for the autopilot, relatively inexpensive 
low-quality gyros may be employed. On the other hand, the aircraft 
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avionics system is likely to include a set of high-quality gyros 
and accelerometers for area navigation or trans-oceanic inertial 
navigation. To assure high autopilot reliability for automatic 

landing,, it is necessary to duplicate or triplicate the gyros and ac- 
celerometers employed to provide autopilot information so that the 
automatic landing can be completed if one sensor fails during the 
landing approach. With an integrated system in which the digital 
computer performs the navigation as well as the autopilot computations, 
it is possible to employ the navigation gyros to provide attitude 
information for the autopilot with redundancy provided by less ex- 
pensive instruments. This approach decreases the total number of 
gyros and accelerometers required without reducing the performance 
of the system. 

Section 2.2 of this chapter describes the digital computer 
algorithms required for implementation of the attitude reference 
system employing body mounted gyros along with a discussion of gyro 
requirements for this system. Section 2.3 analyzes redundancy con- 
figurations to provide failure detection and identification for the 
body-mounted sensors. Section 2.4 discusses the interaction between 
longitudinal autopilot modes and the attitude reference system. 

Section 2.5 describes proposed attitude reference system configurations. 

Section 2.2 Implementation of a Gimbal-less Attitude Reference System 

The discussion of the gimbal-less attitude reference system will 
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be taken up in the following order. First the requirements for rate 
gyros and accelerometers will be determined. Second, the computer 
integration routine which employs the rate gyro outputs to calculate 
the rotation matrix relating a set of reference coordinates to air- 
craft body coordinates will be discussed. Third, the computation of 
the kinematic correction to account for rotation of the reference 
coordinate system due to aircraft motion over the earth and earth 
rotation will be described. Next, the vertical erection computation 
which employs the direction of gravity sensed by the accelerometers to 
provide a long-term vertical reference will be discussed. Then the 
formulas for computing the aircraft heading, pitch, and roll angles 
from the rotation matrix provided by the integration routine will be 
given. Finally, the azimuth erection computation which employs the flux- 
gate compass to provide a long-term heading reference will be described, 
followed by a summary of the conclusions reached in the section. 

2,2.1 Rate Gyro and Accelerometer Requirements 

The basic attitude reference system specification which determines 
the gyro and accelerometer requirements is that the system provide air- 
craft attitude angles to an accuracy of 0.5 degree (9 milliradians) . 
Accuracy of this order is required for course guidance and attitude 
stabilization of a subsonic aircraft. Since the accelerometers provide 
the long-term local vertical reference by sensing the direction of the 
gravity vector and the direction of the vertical must be determined to 
within nine milliradians, it follows that the accelerometer errors should 
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be smaller than 10 g. 

Although rate gyro errors arise from many sources, the errors 
tend to divide into two classes: (a) drift rate or bias errors which are 
independent of the magnitude of the angular velocity being sensed and 
(b) scale factor and linearity errors which depend on the magnitude 
of the sensed angular velocity. The drift rate specification is de- 
termined by two factors. First, since the local vertical rotates at 
15 degrees per hour due to earth rotation and the north east and down 
coordinate system rotates at rates of the same order of magnitude due 
to motion of the aircraft over the surface of the earth at subsonic 
speeds, these effects, if uncompensated, will tend to mask gyro drift 
rates smaller than 15 degrees per hour. Second, during an accelerated 
maneuver, such as a turn, the flux-gate compass sensor is not level and 
provides poor heading information due to magnetic dip (the fact that 
the magnetic lines of force are not horizontal). Also, the accelero- 
meters do not provide good vertical information during an accelerated 
maneuver since they sense aircraft acceleration as well as gravity. 

For this reason, during an accelerated maneuver, the attitude reference 
system must rely on the gyros as the sole source of attitude informa- 
tion. A standard rate (three degrees per second) 180 degree turn 
lasts for one minute, and it is desired that the attitude indication 
errors due to gyro drift rate not build up to more than one half degree 
in this time period. This situation requires a drift rate of less than 
0.5 degree per minute, or thirty degrees per hour. Thus it appears, that the 
drift rate requirements for a minimal attitude reference system are in the 


1 1 -6 



vicinity of 15 to 30 degrees per hour. If possible economically, it 
is desirable to employ gyros with smaller drift rates in order that 
less reliance need be placed on the flux-gate compass and accelero- 
meters for short-term attitude indication accuracy. Reliance on the 
latter instruments for short-term accuracy results in relatively large 
attitude indication errors due to short-term flux-gate compass errors 
(caused, for example, by the compass transducer swinging on its gimbals 
and sensing magnetic dip) and errors due to aircraft acceleration 
sensed by the accelerometers during takeoff and speed changes . 

Scale factor and linearity errors are specified as a percentage' 
of the sensed angular velocity and sometimes also as a percentage 
of full scale angular velocity readings. The following consideration 
determines the requirements for errors which are a percentage of the 
sensed angular velocity. The longest continuous turn which will occur 
frequently is a 180 degree turn. In order that the scale factor/ 
linearity error following the turn be less than one half degree, the 
outputs of the yaw and pitch gyros must be accurate to 0.5°/180° 

or 3 parts per thousand. The roll gyro does not sense steady angular 

velocities for long periods of time in maneuvers typical of a transport 
aircraft, so its accuracy need not be as great. The minimum acceptable 
full-scale rate gyro outputs for a transport aircraft are on the order of 
15 degrees per second for the pitch and yaw gyros and 50 degrees per 

second for the roll gyro. Angular velocities of this magnitude would 

not be sustained for any length of time but would occur as peaks during 
maneuvering and must be correctly sensed by the rate gyros without 
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saturation if accurate attitude indication is to be obtained. Since 
an absolute angular velocity accuracy of 30 degrees per hour is desired, 
the specification of errors which are a percentage of full scale reading 
is one part in 1800 for the pitch and yaw gyros and one part in 6000 
for the roll gyro. The roll gyro requirements could probably be relaxed 
because the natural constraints on the bank angle reduce the require- 
ments for accurate bank angle information from the roll gyro. 

The basic gyro requirements are thus a drift rate of 15 to 30 
degrees per hour, scale factor and linearity good to three parts per 
thousand and full-scale readings of 15 degrees per second for the yaw and 
pitch gyros and 50 degrees per second for the roll gyro. These speci- 
fications are almost impossible to meet with spring-restrained rate 
gyros of the type normally employed for providing body rates for use 
in pitch, roll and yaw damping autopilot modes. Good spring-restrained 
rate gyros sell for about $500 per unit. It is possible to meet these 
requirements with the least expensive electrically torqued integrating 
gyros such as the Honeywell GG250, which sells for about $1,500 per unit. 

Unfortunately the gyro wheel bearings of these gyros usually have 
a lifetime on the order of 1000 hours. Hopefully, in the near future 
gyros of this quality will be introduced which have gas or other longer 
lived gyro wheel bearings. 

2.2.2 Computer Integration Routine 

Let R denote the 3-by-3 rotation matrix which transforms vectors 
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from a fixed reference coordinate system to aircraft body coordinates. 


R V . = V, , 
—ref -body 


( 2 . 2 . 2 - 1 ) 


The reference coordinates are normally chosen to be the attitude 
reference system's approximation to the north, east and down coordinate 
system. Define the following angular velocity vectors. 

oi^ = indicated aircraft angular velocity in body coordinates, 
that is , rate gyro outputs corrected for known bias and 
scale factor errors. 

= angular velocity of north, east and down reference coordinate, 
system (caused by earth rotation and motion of aircraft 
oveT earth) expressed in the north east and down (reference) 
coordinate system. 

tag = erection angular velocity expressed in reference coordinates. 

If aircraft latitude is not known, ov., the angular velocity of the 

"T\ 

reference coordinate system may be ignored and set to zero. The function 
of the erection angular velocity, is to provide an input for cor- 
recting attitude indication errors due to inaccuracies in the rate 
gyro outputs, and Applying a signal causes the indicated north 
and east and down directions to rotate relative to the aircraft with an 
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angular velocity u^. The vector is analogous to the electrical 
erection torque inputs of conventional directional and vertical gyros. 
The differential equation which must be solved by the digital auto- 
pilot computer in the gimbal-less attitude reference mode is 


dR 

It 


= -[oj a x]R 


RUr*] + Rtwg*] 


(2. 2. 2-2) 


where the symbol [w x] denotes the 3-by-3 skew-symmetric matrix 


[ox x] = 


0 _U) 3 “2 


0 -ojj 


• 0)2 0 )^ 0 


(2. 2. 2-3) 


The basic differential equation (2. 2.2-2) may be integrated in two 
ways; it may either be integrated directly as a matrix differential 
equation, or the rotation matrix R may be expressed in terms of a 
quaternion, which consists of a scalar and a three -component vector, 
and the differential equations for these quantities may be solved. 

These two approaches involve essentially the same computer loading, 
that is, the same size program and the same computation time, and they yield 
comparable accuracies. In principle, it would be possible to integrate 
the yaw, pitch and roll Euler angles to determine the rotation matrix R. 
However, this approach requires computer evaluation of several sine and 
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cosine functions which increases computation time without any payoff 
in accuracy relative to the other methods. 

In the quaternion approach, four new variables q^ and 


1 = 


n l 

*2 

^3 


(2. 2. 2-4) 


are introduced. The rotation matrix R is determined from the quater- 

* \i 

nion q^, by the formula 


R = (2q^-l)I + ♦ 2q 0 [ a x] 


(2. 2. 2-5) 


where 


I = 3 by 3 identity matrix 


transpose 


= the row vector [q^^.q-jj 


The quaternion components, q^ and satisfy the differential equations 


^0 1 
dF“ = 2 


( 2 . 2 . 2 - 6 ) 


d 3. 1 

dt = 2 S^A-iSR-SiE 1 ■ 
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where (•) denotes the scalar product of two vectors and (*) denotes 
the vector product of two vectors . 

In principle, only three parameters, for example the Euler 
angles, are required to specify the attitude of the aircraft. When 
more than three parameters, four in the case of a quaternion and nine 
in the case of a 3-by-3 rotation matrix, are employed to specify atti- 
tude, there must exist constraints among the parameters. In the case 
of a quaternion, the constraint is that the sum of the squares of the 
quaternion components is one, i.e. 

V* 111 2 ' 1 (2. 2. 2-7) 

In the case of the rotation matrix, the columns of the matrix must have 
unit length and be mutually orthogonal, that is 

R T R = I (2. 2. 2-8) 

where the superscript T indicates the matrix transpose. If these con- 
straints were initially satisfied and the differential equations for 
the quaternion or rotation matrix were solved without error these 
constraints would be satisfied for all time. However, since the dif- 
ferential equations are solved numerically, round-off errors and errors 
generated by the integration formula employed will cause the constraints 
to drift alowly away from their correct values. Since, if the constraints 
are violated by too wide a margin, the attitude computations become 
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meaningless, slow numerical feedback loops must be employed to drive the 
constraints to their correct values. These numerical feedback loops 
control small errors which have little effect on attitude accuracy as 
long as the constraints are kept near their correct values, so the 
primary consideration in specifying them is simplicity. For the case 
of the quaternion, the constraint may be met by adding the following 
terms to the right-hand side of the differential equation (2. 2. 2-6) 

w-io - lal 2 M 0 

(2. 2. 2-9) 

KCMo-laJ 2 ) 9L " 

Note that these terms would not change the values of dq Q /dt and d^/dt 
if the constraints were satisfied. The correction gain, K, is half 
the inverse time constant of the correction process and the choice 
of its value would depend on the magnitude of the numerical integration 
errors . 

In the case where the rotation matrix is integrated directly, let 
— 1’ —2 an< * —3 ^ enote t ^ e columns of the rotation matrix R. 

R = [r x , r 2 , (2.2.2-10) 

The constraints given in Eq. (2. 2. 2-8) may be held by adding the expression 

KCi-UnPli (2.2.2-11) 
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to the normal expression for the derivative of the first column, r^, 
adding the expression 

KU-r^r^ - KCiyr^ (2.2.2-12) 

to the normal expression for the derivative of second column, £2* 
and adding the expression 

KCl-r^r^r^ - KCr^r^)^ - KQ^r^r^ (2.2.2-13) 

n 

to the normal expression for the derivative of the third column, r^. 
Again, K is the correction gain or inverse time constant and is chosen 
on the basis of the size of the numerical integration errors. 

The sampling rate for integrating the differential equations for 
the rotation matrix or quaternion is determined by two considerations : 
(a) desired bandwidth of the attitude reference system and (b) errors 
due to coning motions of the aircraft. Unless unusual precautions 
are taken in the numerical integration method employed to solve the 
differential equations, the highest frequency component of attitude mo- 
tion which will be passed without significant distortion is on the order 
of one fourth the sampling rate. The desired system bandwidth for a 
transport aircraft would probably be a few cycles per second. If 
the attitude of the aircraft is undergoing a coning motion (for example, 
if the aircraft is pitching and yawing so that the nose travels in 
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a small circle while the wings remain nearly level), a difficult 
situation arises. Such a caning motion might be caused by vibration 
small autopilot limit cycles or air turbulence. When the aircraft 
cones, a small steady component of angular velocity is present 
parallel to the axis of the cone while oscillatory angular velocities 
appear about axes normal to the cone axis . Over long periods of time 
the net change of attitude of the aircraft is small since it returns 
to its original attitude at the end of each coning cycle. If both 
the steady and oscillatory components of angular velocity are within 
the passband of the system, they are correctly processed by the 
numerical integration routine, and correct attitude information indi- 
cating a small net attitude change is generated. However, if the 
coning frequency is high enough, the oscillatory components of angular 
velocity will be beyond the bandwidth of the system and will be lost 
while the steady component of angular velocity about the cone axis is 
retained, giving the false indication that the aircraft is rotating 
steadily about the cone axis rather than coning and holding essentially 
constant attitude. Thus, the gyro and computational bandwidths must 
be high enough to track any coning motion present in the aircraft's 
motion which would cause too large an indicated attitude drift if they 
were outside the bandwidth of the system. ■ This coning error is a 
second-order effect due to the rectification (or lack of rectification) 
of the oscillatory angular velocity components in the nonlinear 
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differential equations and thus, fortunately, is not too large. Data on 
typical motions of the aircraft would be necessary in order to deter- 
mine the bandwidth needed to meet coning accuracy requirements . 


2.2.3 Correction for Angular Velocity of Reference Frame 

The formula for co^, the angular velocity of the north, east and 
down coordinate frame relative to inertial space expressed in north, 
east and down coordinates as required in Eq. (2. 2. 2-2) is 


, U 

ft COS L + rr Sin \p 

e R Y 




U cos ip 
R 


-ft sin L - tan L sin ip 

C K 


(2. 2. 3-1) 


where 

ft = angular velocity of the earth 
c 

iJj = aircraft true (as opposed to magnetic) heading angle 
L = latitude of aircraft (positive in northern hemisphere) 
U = true airspeed of aircraft 
R = radius of the earth 


Note that the sine and cosine of the heading angle rather than the 
heading angle itself are required in this calculation. To gain an 
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idea of the size of note that earth rate, Q , is fifteen degree, 
per hour and that for a true airspeed, U, of one thousand miles per 
hour the quantity (U/R) corresponds to about fifteen degrees per 
hour. 


2.2.4 Vertical Erection Computation 

Due to gyro errors and inaccuracies in the compensation for the 
angular velocity of the reference coordinate frame described above, 
the integration of rate gyro outputs alone does not provide an ade- 
quate long-term attitude reference. The approach normally adopted is 
to employ the gyros to provide short-term attitude information while 
accelerometers are employed to sense gravity and provide long-term 
information on the direction of the local vertical and a magnetic 
compass is employed to provide long-term heading information. The 
accelerometers and magnetic compass do not provide good short-term 
attitude information for the following reasons. Since the accelerometers 
actually sense aircraft acceleration minus gravity, in the short term 
the accelerometer outputs are likely to be dominated by signals due 
to aircraft motion. However, over a one-minute period, if the aircraft 
is not executing an accelerated maneuver, it is unlikely that the 
horizontal component of the aircraft velocity will change by more than 
twenty feet per second, and the average horizontal acceleration 
over a one minute time period is less than 


20 G_ ~ 1_ 

60 * 32 90 


(2. 2.4-1) 
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Thus, over a one-minute period, the average accelerometer output will 
be within one percent or one half degree of angle of the gravity vector. 

The magnetic (flux-gate) compass is mounted on pendulous gimbals 
so that it remains level and does not sense magnetic dip, which would 
produce large indicated heading errors. These gimbals are lightly damped 
in order to prevent aircraft pitch and roll rotation from being transmitted 
to the suspended compass sensor. Thus, linear accelerations of the air- 
craft cause the compass sensor to swing like a pendulum and the sensor 
output signals contain oscillatory error signals due to the vertical 
component of the magnetic field (dip effect), which is sensed as the 
compass sensor swings. Since, on the average, the compass sensor is 
level, these errors will average out to zero. 

The long-term attitude information from the accelerometers and 
compass enters the rotation matrix calculation through the erection 
angular velocity, The effect of the input is to cause the 

indicated vertical and north directions to rotate relative to the 
aircraft with an angular velocity The erection angular velocity 

ojg is most conveniently expressed in the reference coordinate system 

; 

and is made up of two components, u , the vertical erection 

V. 

angular velocity and co^, the azimuth erection angular velocity. 


= oj + w. 
— E — v -A 


( 2 . 2 . 4 - 2 ) 


Let a^ oc jy denote the indicated acceleration in aircraft body 
coordinates, that is , the body-mounted accelerometer outputs corrected 
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for known scale factor and bias errors. The indicated acceleration 
in reference coordinates, a_ is determined from the equation- 


—ref 


= R 


^body 


(2. 2.4-3) 


If there is an indicated acceleration along the reference co- 
ordinate system Y axis (indicated east axis), the re'ference coordinate 
frame should be rotated in a positive sense about its X (indicated 
north) axis in order to force the indicated acceleration to lie 
entirely along the minus Z reference axis. Similarly, if there is 
an indicated acceleration along the reference coordinate frame X 
(indicated north) axis, the reference coordinate frame should be 
rotated in a negative sense about its Y axis to eliminate this 
acceleration component. Thus 


0) 

—v 


-a 


ref,y 

ref ,x 
0 


(2. 2. 4-4) 


where is the vertical erection gain. The quantity (1/K v g) is 
the time constant of the vertical erection loop and normally would not 
be chosen smaller than one minute. The dynamics of the vertical 
erection loop is discussed in Section 2.4. At this point it may- 
be noted that the vertical erection gain is small, so that the 

accelerometer outputs have only a long term effect on the indicated 
attitude . 


11-19 



Provision must be made for erection cutoff during accelerated 
maneuvers by setting to zero when the bank angle is larger than 
a preset value and also, if desired, when the longitudinal acceleration 
exceeds a preset value. It is also desirable to limit the maximum 
magnitude of the erection angular velocity, since it is known 
that the drift rates being corrected by are relatively small. 
Provision must also be made for inserting a large vertical erection 
gain, K y , for pre-takeoff alignment of the attitude reference system. 
Initial alignment may also be accomplished by calculating the intial 
rotation matrix, R, from the accelerometer and compass outputs when 
the aircraft is stationary before takeoff. However, this method 
requires a special subroutine for initial alignment and thus increases 
computer memory requirements . 

2.2.5 Calculation of Attitude Angles from Rotation Matrix Elements 

The purpose of this section is to give the formulas for extracting 
the heading angle ip, the pitch angle 6, and the roll angle <f> from 
the elements of the rotation matrix R relating reference to body 
coordinates. The attitude angles ip, 0, and <f> are needed to drive 
the artificial horizon and compass displays and as autopilot inputs, 
while the heading angle \p is also required for the azimuth erection loop 
described in the next section. 

It should be noted that for most, if not all, of these purposes 
the quantities required are the sine and cosine of the attitude angles 
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rather than the actual angles themselves. Thus, the displays require 
synchro or resolver signals which are the sine and cosine of the 
angle to be displayed. Also, the vehicle motion angular velocity 
correction, is computed employing cos ip and sin ip but not ip itself 
and the formulas for azimuth erection given in the next section 
require cos ip and sin ip rather than ip. The reason that this fact 
is important is that it is costly in time to compute trigonometric 
and inverse trigonometric functions, and the attitude reference 
computer program must run at a high cyclic rate to provide the necessary 
bandwidth. Thus, it is desirable to eliminate all unnecessary 
trigonometric function evaluations. 

To obtain the formulas for the cosine and sine of the heading 
angle, note that the first row of the rotation matrix R is the 
aircraft X body axis unit vector expressed in reference coordinates. 


cos ip 


sin ip 


'll 


V 


2 2 
R H+ R 12 


12 


V 


2 2 
R ll +R 12 


( 2 . 2 . 5 - 1 ) 


Since the denominator in these expressions turns out to be the cosine 
of the pitch angle, it will not be small for normal transport aircraft 
attitudes . 
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Again, using the fact that the first row of the rotation matrix 
is the body X axis expressed in reference coordinates, it follows 
that 

cos 0 = V R i i +R i2 


sin 0 = -R 


13 


(2. 2. 5-2) 


Finally, consider the vertical plane containing the aircraft 
X axis and let e^ be the unit vector in this plane normal to the 
aircraft X axis. Then 


Iref ’ 2. ° - >Sb„dy sin 6 


(2. 2. 5-3) 


where ^. e f and ^body are re f eren ce Z and body X axis unit vectors. 

Solving Eq. (2. 2. 5-3) for e_, employing (2. 2. 5-2) and the fact that the 
third column of R contains the components of the reference Z axis 
expressed in body coordinates, it follows that 


^body 


V 


2 2 
R ll +R 12 


R 


23 


33 


C2.2.5-4) 


and thus 
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COS <j> 


33 


V 


2 2 
R ll +R 12 


•N 


sin 4 > 





C2. 2.5-5) 


2,2.6 Azimuth Erection Computation 

Let denote the magnetic heading indicated by the fluxgate 
compass sensor. The electrical signals provided by the compass sensor 
are proportional to the sine and cosine of the magnetic heading of the 
aircraft rather than to the heading angle itself. Let ip v be the magnetic 
variation, that is, the difference between true heading and magnetic 
heading at the present location of the aircraft. Since magnetic varia- 
tion is a slowly varying quantity, the azimuth erection routine would 
be provided with values of cos and sin ip v which would be updated 
occasionally . 

Since the function of the azimuth erection routine is to drive 
the indicated heading angle into agreement with the compass heading 
corrected for magnetic variation, the azimuth erection angular velocity, 
o) ^ , expressed in reference coordinates will be taken to be 


u>» 


0 

0 

" K A Sin CVV* 3 


C2.2.6-1) 
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In this case, the erection gain, K^, is the inverse time constant 
of the azimuth erection loop. 

To avoid evaluation of trigonometric functions in the computer, 
the following expression would be used to compute the erection signal. 

sinO c +t v -i/>) = (cos i^sin 4* v +sin \p c cos i|/ v )cos ip 

- (cos 4/ c cos ijj v ~sin t^sin ip^) simp (2. 2.6-2) 

It may be desirable to display magnetic rather than true heading. 

In this case, another correction for magnetic variation may be carried 
out before displaying the heading angle or the reference coordinate 
system may be erected to magnetic north rather than true north. In 
the latter case, the equations for the angular velocity of the 
reference coordinate system relative to inertial space must be modified 
to include magnetic variation and its rate of change. 

As with the vertical erection loop, provision must be made to set 
the azimuth erection gain, K^, to zero during accelerated maneuvers 
since the fluxgate compass sensor will not remain level during accelerated 
flight and will give erroneous readings due to magnetic dip. Provision 
must also be made to employ a high value of for initial alignment of 
the attitude reference system before takeoff. 

2.2.7 Summary of Implementation of Gimbal-Less Attitude Reference 
System 

Unfortunately, the rate gyros normally employed for autopilot 
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rate damping modes are not accurate enough to meet attitude indication 
requirements and the next better grade of single- degree- of- freedom 
gyros, costing about three times as much, would have to be employed. 
However, the outputs of these gyros would be used for rate damping 
as well as attitude indication, resulting in a savings in the total 
number of gyros required. 

The computer algorithm required to process the data is more 
complex than the average algorithm encountered in autopilot applica- 
tions. However, it is simple enough to be easily implemented on a 
mini -computer . The major computational problem is the high cyclic 
rate at which the algorithm must be operated to provide the necessary 
bandwidth. A cyclic rate of twenty cycles per second would provide 
a five cycles per second bandwidth, which should meet normal autopilot 
requirements. However, the bandwidth required to eliminate significant 
attitude indication errors due to aircraft coning would depend on the 
coning behavior of the particular type of aircraft carrying the system 
and could be higher than five cycles per second. 

Long-term attitude indication accuracy would be provided by 
erection loops employing accelerometers and a fluxgate magnetic compass 
as in a conventional system. 

The gimbal-less implementation has a slight advantage over the 
conventional directional gyro because the gimbaling of the directional 
gyro causes a small heading indication error when the aircraft is banked 
and the heading is not a cardinal direction while the gimbal-less system 
has no short-term heading sensitivity to roll angle. 



2.3 Provision for High Reliability from the Body -Mounted Instruments 

A number of the attitude reference system sensors are mounted di- 
rectly' on the airframe rather than being mounted on gimbals . This 
' class of sensors includes the rate gyros employed to provide aircraft 
body rates for the autopilot rate stabilization modes. These same 
gyros may also be employed to provide attitude angle information if 
the gimbal-less attitude reference implementation described in the 
preceding section is employed. (in this case, all the gyros and 
accelerometers in the attitude reference system will be body -mounted.) 

The attitude reference system may also contain body-mounted accelero- 
meters to provide load factor, side force and vertical acceleration 
(for autoland mode) information for the autopilot. 

With gimbaled sensor packages such as a vertical gyro, direc- 
tional gyro , or stabilized platform, the most practical approach, to 
providing high reliability through redundancy is to install several 
identical sensor packages which measure the same physical quantities and 
arrange for voting among their outputs. This is true because the failure of 
a single component of a sensor package, for example a single gyro on 
a gimbaled platform, tends to render the entire senspr package in- 
operative . 

The redundancy situation with body-mounted rate gyros and accelero- 
meters is different because these sensors measure a single component 
of a three-dimensional vector. Thus, if these sensors are mounted 
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in such a way that each sensor measures the component of the desired angular 
velocity or acceleration in a different, carefully chosen direction in 
space, the desired vector can be determined from any three sensor 
outputs. Employing a redundancy technique in which each sensor mea- 
sures a different quantity results in a smaller number of sensors 
being required for a given level of reliability than if several sen- 
sors measure the identical quantity. However, when a failure occurs, 
the task of determining which sensor has failed becomes more difficult 
when the instruments all measure different quantities. 

In this section two redundant configurations of single-degree- 
of -freedom body-mounted sensors are proposed. The first configura- 
tion provides the maximum possible economy of sensors but requires 
extensive computer processing to identify failed sensors. The 
second configuration employs more sensors, although still fewer than 
a pure voting technique would require, and lends itself to relatively 
simple identification of failed sensors. 

The term "body-mounted instruments” refers in this section to the 
body-mounted single-degree-of-freedom rate gyros and accelerometers. 

The two major considerations in providing high reliability are (1) 
detecting and identifying instrument failures and (2) the configuration 
in which the instruments are mounted. 

When an instrument fails, the data processing system must be 
informed of the failure so that the output of the failed instrument 
can be removed from the calculations. (This removal may occur 
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implicitly rather than explicitly if majority voting of instrument 
outputs is employed.) Two inodes of failure detection/identification 
are possible: self test and functional test. The term "self test" 
is intended to cover the cases when information from a single instru- 
ment is employed to determine whether that instrument has failed, without 
using signals from other instruments. "Functional test" covers the 
cases in which the output of an instrument is compared with the outputs 
of other instruments in the system to determine whether a failure has 
occurred . 

The two modes of self test described below are commonly available 
in rate gyros, and the second mode is also available in accelerometers. 
Mode (a): A signal is available which indicates whether or not the gyro 

wheel is rotating at the proper speed. Since wheel bearing failures 
occur frequently, this is a useful check and should be employed. 

Mode (b): a self-test torquer is provided which produces an accurately 
controllable torque about the same axis that receives gyroscopic torque 
from sensed angular velocity. In an accelerometer, the self-test 
torque is applied about the axis which receives torque due to sensed 
vehicle acceleration. This is a reliable test of the instrument's 
ability to sense changes of angular velocity or linear acceleration. 

It has two limitations. First, it does not test for biases; that is, 
it cannot determine if the instrument output is zero when the angular 
velocity or linear acceleration is zero. Biases may develop in flight 
due to mass unbalance in the instruments or due to more subtle causes 
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such as convection and gas bubbles in the flotation fluid. Thus the 
self-test torquer provides a complete preflight test, when the aircraft 
angular velocity and linear acceleration are known and both instrument 
biases and scale factors can be checked, but it provides an incomplete 
in-flight test. Second, during flight through turbulent air, it may be 
difficult to discriminate between instrument outputs caused by aircraft 
motion and self-test torques . The simplest solution to this problem is 
to compute the aircraft rate or acceleration which the instrument should 
sense based on the outputs of the other instruments of a redundant con- 
figuration. In this case, any difference between the computed and 
actual instrument output should be caused by the self-test torque. 

Using this approach, the test becomes a hybrid one but may be useful in 
flight to provide identification of failures at a lower failure level 
than a pure functional test would provide. 

In a functional test, the outputs of redundant instruments are 
available, and the output of any instrument is calculable from the out- 
puts of other instruments. Any difference between the computed and 
actual output beyond the tolerance due to normal instrument errors 
indicates that either the original instrument or one of the instruments 
employed in the calculation of its output has failed. The difficulty 
in functional testing arises in identifying which instrument has failed. 
In order to identify a single failure, it is necessary to employ an 
array of at least five instruments. (That is, a total of at least five 
rate gyros must be used, not five gyros per body axis.) Thus, if two 
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failures are to be tolerated, six instruments must be employed, so that, 
after the first failed instrument is removed from the calculations, five 
instruments remain, and the second failure can be identified. On the 
other hand, if functional failure identification were not a consideration, 
a system consisting of five instruments with their input axes skewed so 
that no set of three input axes lies in the same plane would be able to 
tolerate two instrument failures. The computer program required for 
functional failure identification may consist of several hundred words 
and must have a high repetition rate so that failures are identified 
before they do serious harm to the mission. • Thus, failure identifica- 
tion has a significant effect on computer loading. 

The conclusion reached relative to testing modes is that func- 
tional testing for failures must be carried out. If minimizing 
computer loading is an important factor, a simple voting scheme with a 
redundant set of instruments mounted on each of three mutually ortho- 
gonal body axes may be employed. However, if computer time is available, 
it will be seen below that a saving in the number of instruments required 
is possible by employing a non-orthogonal configuration of instruments 
with more complex failure identification algorithms. 

Two redundant instrument configurations are described below. The 
instrument configuration is the arrangement of the instrument input axis 
directions relative to the body axes of the aircraft. The configurations 
are designed to tolerate two instrument failures and provide for identi- 
fication of the failed instruments by functional testing, that is, 
by comparison of instrument outputs. 
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It is assumed that the two instrument failures to be tolerated 
occur as sequential single failures with enough time between failures 
to allow the first failure to be identified before the second failure 
occurs. This is a valid assumption if the failures occur randomly 
with a constant failure rate. Multiple simultaneous failures are dif- 
ficult to identify because the failures may tend to mask each other. 

As a somewhat oversimplified example of how double failures may mask 
each other, consider the case of four instruments measuring the same 
quantity whose correct value is one, and assume that two instruments 
have failed to zero output. Then the four instrument outputs are 
zero, zero, one and one, and it is difficult to determine whether zero 
or one is the correct answer. On the other hand, if the failures had 
occurred sequentially, the outputs after the first failure would have 
been zero, one, one, one, and the decision would have been made to 
ignore the output of the first instrument from then on. The output after 
the second failure, ignoring the first instrument would be zero, one, one, 
and it would be clear that one is correct. In the case of measuring 
angular velocity or linear acceleration, a configuration consisting of 
at least seven instruments is required to guarantee functional identi- 
fication of all large simultaneous double failures. Note that this 
figure compares with a minimum of six instruments required to identify 
two sequential single failures. Furthermore, if the possibility of 
double simultaneous failures is allowed, the size of the smallest single 
failure which will be identified increases. This is undesirable because 
of errors produced while employing the output of the failed instrument 
before it is identified. 
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The first suggested instrument configuration employs six instru- 
ments and therefore provides the best possible economy of instruments. 

If it is desired to reduce the amount of computation required for 
failure identification, a second configuration employing eight instru- 
ments is suggested. Failure identification with the eight-instrument 
configuration is almost as simple as majority voting and can be ac- 
complished with either analog or digital signals. The voting approach 
would require four instruments for each aircraft body axis, a total 
of twelve instruments. Therefore, the eight -instrument configuration 
is recommended rather than voting with twelve instruments if computa- 
tional simplicity is desired. 

If the minimum possible number of instruments is to be employed, 
it is important to distribute their input axes in space as widely as 
possible. For this reason, the instruments of the six instrument sys- 
tem are configured so that their input axes are normal to the faces of a 
regular dodecahedron as shown in Figure 2.1a. This configuration is des- 
cribed in Reference [1], and optimum failure detection and identification 
algorithms and an error analysis are contained in Reference [2] . Since 
this configuration is documented elsewhere, it will not be discussed 
further . 

In the eight -instrument configuration, direct comparison between 
outputs of instruments with parallel input axes is employed to simplify 
the failure identification logic. Therefore, the instruments are mounted 
in pairs with two instrument input axes normal to each face of a regular 
tetrahedron as shown in Figure 2.1b. In the discussion of this configuration. 



the instruments will be assumed to be rate gyros and the measured vector 
will be assumed to be aircraft angular velocity, although the results 
apply equally well to acceleration measurement. 

The problem of calculating aircraft angular velocity along body 
axes from gyro information along axes that are skewed to the body will 
be discussed first. Since there is a high degree of redundancy in the 
measurement of angular velocity with zero or one failure (for example, 
-with no failures, from three to eight gyro outputs may be employed in 
this calculation), the alternative methods of computation will be 
pointed out, but the relatively arbitrary choice of which is most 
desirable, with a given number of failures will not be made. The four 
axes a_, b, c and d along which the input axes of pairs of instruments 
are aligned are given by 


a = — (i + j + k) 
“ /3 ~ 



c = — C-i + j_ - k) 

~ /3 


d = — (-i_ - + JO 


( 2 . 3 - 1 ) 


where i_, j_ and k^ are unit vectors along the body x, y, and z axes 
respectively. The a, b_, £, and d axes will be called "configuration 
axes". The component of angular velocity along a configuration ..axis 
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is obtained by either selecting the output of one of the two instru- 
ments whose input axes lie along that configuration axis or averaging 
the two outputs. Naturally, the outputs would not be averaged if one 
of the instruments has been identified as failed. Averaging should 
reduce the effect of normal (unfailed) gyro errors somewhat, giving 
an improvement by a factor of (/2/2) if the errors are independent 
random variables. If the angular velocity components, w , o^, w , 'and 
oj^ along all four configuration axes are available, the least-squares 
estimate of angular velocity along body axes, u> x , uy, and u) z , may be 
employed. 


“x = “ K + % " “c ' “d ) 
4 

“y = 4 Cu) a ' “b + “c " “d 3 


- ^ r 

“z " “4 Cul a ' “b 


- to + to,) 


(2.3-2) 


The body axis angular velocity may be computed from the angular velocity 
components along three configuration axes as follows. With the a, b 
and c axes : 


>x = -T C “a + V 

V = 4 K ^ 
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With the a, b, and d axes: 


(JO 


X 




“y = T K + “c 5 
w z = "T (u) a + V 


(2.3-3) 


With the b, c and d axes: 


“x = ~2 C * w c ‘ “d 3 

_ /3 . . 

w y = T (-(1) b ' “d } 


“z = T ^ _w b ■ “c 3 

If the body-axis angular velocity components are to be computed with 
analog signals, the fact that the coefficients within each expression 
above have equal magnitudes is a convenience. Switching from a four 
configuration-axis to a three configuration-axis computation may be 
accomplished by switching off two inputs in each expression in Eq. (2.3-2) 
and multiplying the result by two. Since there are only two possible 
three-configuration-axis expressions for each body axis component of 
angular velocity, an alternative mechanization would evaluate both 
expressions, averaging them for four-axis operation and selecting the 
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one appropriate single expression for three-axis operation. Finally, 
the component of angular velocity which should be measured along one 
of the configuration axes may be calculated from the components along 
the other configuration axes using the expression 

“a + % + “c + “d = 0 (2.3-4) 

The advantage of spreading the configuration axes out in space 
as widely as possible may be seen at this point. If three instruments 
with independent random (unfailed) errors of one unit rms magnitude 
are mounted with one instrument input axis along each of the three mutually 
mutually orthogonal body axes, the angular velocity uncertainty about 
any axis in space has an rms magnitude of one unit. On the other hand, 
if three instruments with the same errors are mounted with one instru- 
ment input axis along each of three of the four configuration axes 
defined above, the largest angular velocity uncertainty occurs about 
the fourth configuration axis and has an rms magnitude of /3 units 
(1.7 units) while the uncertainties about axes normal to this axis have 
rms magnitddes of / 5/2 units (0.9 units). This extra uncertainty is the 
price paid for the flexibility of being able to employ any three of the 
of the four configuration axes and results even though the configuration 
axes are nearly orthogonal, the angle between any two configuration 
axes being 109.5°. 

Failure detection and identification with the eight -instrument 
configuration are performed as follows. Preceding the first failure. 
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there are two "good" instruments on each of the four configuration axes . 
The first instrument failure is detected by noting that the outputs of 
the two instruments along the configuration axis containing the 
failed instrument disagree. The problem of identifying the failed 
instrument reduces to deciding which of the two instruments along 
the configuration axis with disagreement is the bad one. Eq. (2.3-4) 
above determines the angular velocity which instruments along this axis 
should read as a function of the outputs of the instruments along the other 
axes, which are known to be good. The failed instrument is identified 
as the instrument whose output disagrees with this computed value, and 
the output of the failed instrument is removed from use in further com- 
putations. In order to handle the case of temporary transient failures, 
it would be possible to reintroduce the output of a failed instrument 
into the computations if the output remains correct over a period of 
time . 

After the occurrence of failures, some configuration axes will 
contain two good instruments, while other configuration axes will con- 
tain only one, or zero, good instruments. Configuration axes containing 

two good instruments will be called "duplex axes", while axes containing 

\ 

only one good instrument will be called "simplex axes". The second failure 
may occur in two ways. First, the axis mate to the first failed instrument 
may- fail. This failure is detected because equation (2.3-4) is no 
longer satisfied by the four configuration axis outputs. The second 
failed instrument is identified as the axis mate of the first failed 
instrument, because the three remaining duplex axes still display intra- 
axis agreement. Correct outputs are available along three of the four 
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configuration axes, and the system remains operable. After this failure, 
the six remaining instruments are located on three duplex axes, and 
a third failure will be detected by intra-axis disagreement. This 
detection capability may be employed to engage mission (landing) abort 
logic. However, with this type of triple failure, it is impossible to 
determine, from the instrument angular velocity outputs alone, which in- 
strument on the axis with disagreement has failed, and the system is 
inoperable unless the failed instrument can be identified by self- 
test . 

The second type of second failure is one in which one of the instru- 
ments along one of the three remaining duplex axes fails. This failure 
is detected by intra-axis disagreement along the failure axis. The 
failed instrument must be on the duplex axis with disagreement and is iden- 
tified by computing the correct axis output from Eq.(2.3-4). The output 
of the failed instrument is removed from the computations, and the system 
remains operable with two duplex and two simplex axes. If the third 
failure occurs in an instrument along a duplex axis, the failure is 
detected by intra-axis disagreement and may be identified by employing 
Eq. (2.3-4) to determine which instrument on the axis has the correct 
output, and the system remains operable. Of all triple failures, this 
type, with failed instruments on three different configuration axes, 
occurs 4/7 of the time. Thus, there is better than a fifty-percent 
chance that the third failure can be identified by functional 
testing. If the third failure occurs in one of the two simplex 
axes, the failure will be detected because equation (2.3-4) is not 
Satisfied. With this type of triple failure, it is impossible to 
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determine from the instrument angular velocity outputs alone which 
instrument has failed, and the system is inoperable unless the 
failed instrument can be identified by self test. 

The failure probabilities for the two instrument configurations 
may be calculated as follows. The six -instrument configuration is not 
capable of functionally identifying the third failed instrument. 
Therefore, its dominant failure mode is a triple failure with the 
third failure of a type which cannot be identified with self test. Let 


Q = probability of failure of a single instrument 

S 

= probability that self test will not identify a failed 
instrument 

^system = s y stem f ailure probability. 

Since there are 

(^) = 20 distinct triple failures with six instruments. 


Q * ! 20 Q (r 

^system x s v g 


(2.3.4) 


The eight -instrument configuration is not capable of functionally 
identifying the third failure if two failures occur on the same configura- 
tion axis. Thus, the dominant failure mode with the eight instrument 
configuration consists of a triple failure with two failures on the same 
configuration axis and the third failure of a type which cannot be 
identified by self test. Since there are 24 distinct triple failures 
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with two instruments on the same configuration axis, 


^system ' 24 Q s 


(2.3-5) 


The six-instrument configuration has fewer instruments, so failures 
will occur less often with this configuration. However, the eight- 
instrument configuration is able to identify functionally some triple 
failures , and for this reason the failure probabilities for both con- 
figurations are about equal. 


2.4 Interaction between Longitudinal Autopilot Modes and the Attitude 
Reference System 

Vertical erection loops are usually employed in the aircraft atti- 
tude reference system to provide long-term stabilization of the indicated 
vertical to the true local vertical. The pitch erection loop derives 
its input from a horizontal accelerometer which senses aircraft speed 
changes as well as vertical indication errors. When the indicated 
pitch angle from the attitude reference system is used as an autopilot 
input, the sensitivity of this signal to aircraft speed changes provides 
an undesired positive feedback path in longitudinal autopilot modes. 
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The effects of this feedback path are analyzed in this section. It 
is found that at subsonic cruising speeds a fairly serious degradation 
of the pitch hold mode results, while the effect on altitude and Mach 
hold modes is minor The degradation of the pitch hold mode probably 
has little operational significance. It could be eliminated in a 
straightforward way by employing a better than normal grade vertical 
indicating system with either weak erection loops or Schuler tuning. 
Other corrective measures include limiting the maximum pitch erection 
rate, adding a Mach, hold loop which controls airspeed by varying power 
setting or employing an airspeed rate signal derived from a pressure 
sensor to null out the unwanted component of the pitch erection signal. 


2.4.1 Erection Loop Dynamics 

The subsystem which provides short-term attitude information 
in the attitude reference system may be either (a) a vertical gyro - 
directional gyro combination, (b) a gyro-stabilized platform, or (c) 
a strapdown system in which signals from body -mounted rate gyros are 
integrated in a computer to generate the rotation matrix for the 
transformation from navigation coordinates (north, east, down) to 
aircraft body coordinates. Over time periods of a few minutes, which 
are of interest for this discussion, all three subsystems behave in 
the same way, providing an indicated vertical whose angular velocity 
relative to inertial space is the sum of a small drift rate and an 
electrical input signal for providing long-term corrections, the latter 
called the "torquing signal", For convenience of terminology, this 
subsystem will be referred to as the "vertical gyro", although it may 
in actuality be any one of the three subsystems described above. 
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If the vertical gyro is operated without the correction Ctorquing) 
signal, the indicated vertical will not remain parallel to the true local 
vertical for two reasons, (a) The local vertical rotates relative to 
inertial space due to the rotation of the earth and the motion of the 
aircraft around the earth while the indicated vertical stays fixed in 
inertial space except for gyro drift. Since the local vertical angular 
velocity component due to aircraft motion over the earth is approxi- 
mately one earth rate for each 1000 miles per hour of forward speed 
(the angular velocity of the earth is 15 degrees per hour), the maximum 
value of local vertical angular velocity which must be corrected in 
subsonic aircraft is twice earth rate. (b) Gyro drift caused by 
unwanted torques such as gimbal friction and mass unbalance. Gyro 
drift depends on the quality of the gyros employed; it varies from one 
earth rate for a minimal system to much smaller values. 

The compensating angular velocity required to eliminate type 
(a) effects may be calculated if aircraft position and velocity are 
known. This compensation is an open-loop correction, since the vertical 
indication error magnitude has no effect on the correction signal. 
However, even if this compensation is not exact due to uncertainties 
in aircraft position and velocity and torquing signal scale-factor un- 
certainty, it will reduce the rate at which the indicated vertical 
tends to drift away from the true local vertical and thus reduces the 
requirements imposed on the closed-loop correction system. The only 
quantity required to calculate this correction which is not normally 
available in a flight control system is aircraft latitude (longitude 
is not needed in the calculation) . In the design of simple attitude 
reference systems, the improvement in vertical indication accuracy pro- 
vided by this correction is often considered to be not worth the com- 
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plexity of obtaining latitude , and this correction is not carried out. 

In order to provide long -term vertical indication accuracy, some 
signal proportional to vertical indication error must be obtained to 

eliminate the effect of any kinematic drift (type (a)) which, is not 

/ 

completely compensated and gyro drift (type (b)). Since. the gravity N 

vector lies along the local vertical, it is natural to employ a pen- 
dulum, level , or accelerometer to sense the direction of the local ver- 
tical. Each of these instruments senses the same physical quantity, the 
component along its sensitive axis of the acceleration of its 

mounting point minus gravity. If an accelerometer (or level) is 
mounted with its sensitive axis normal to the indicated vertical, that is, 

on the gimbal which is stabilized to the indicated vertical, and the 
aircraft is not accelerating, the accelerometer output will be the 
component of gravity normal to the indicated vertical and thus is 
proportional to the vertical indication error. Normally, two ac- 
celerometers are employed, one to sense vertical . indication error about the 
pitch axis and one for roll axis error. The pitch error accelerometer 
is nearly parallel to the longitudinal axis of the aircraft and there- 
fore senses rate of change of airspeed as well as gravity. In cruise 
the average longitudinal acceleration is small, and the low-frequency 
component of the pitch error accelerometer signal provides a good 
vertical indication error signal. During the take-off run and speed 
changes in flight, it is desirable to disable the signal from the pitch 
error accelerometer. Similarly, during turns, since the roll error 
accelerometer remains approximately horizontal, it senses the centri- 
petal acceleration of the aircraft, hence does not provide an accurate 
vertical indication error signal, and must be disabled. The outputs of 
the accelerometers are scaled and serve as torquing signals for the 
vertical gyro. These signal paths from the error -sensing accelerometers 
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to the vertical gyro torquing inputs are called vertical erection loops. 

In a strapdown attitude reference system the accelerometers are 

mounted on the aircraft body rather than on a gimbaled structure 
stabilized to the indicated vertical. However, the acceleration that 
would be measured by accelerometers mounted normal to the indicated 
vertical can be calculated as linear combinations of the body mounted 
accelerometer outputs using the elements of the rotation matrix for 
the transformation from navigation to body coordinates. From this 
point on, the operation of strapdown and conventional systems is the 
same. 

To obtain the transfer function of the vertical gyro with erec- 
tion, assume that the aircraft is flying with a constant heading. 

* 

(When the aircraft turns, pitch vertical indication error is rotated 
into roll vertical indication error and vice-versa. Also the erection 
loops would probably be disabled during a turn). If e is the angle 
measured about the pitch axis from the true local vertical to the 
indicated vertical, then 


dc 

dt 


a , - K a. 
d e 1 


(2.4-1) 


where is the drift rate of the vertical gyro without erection, K g 
is the scale factor or gain relating the torquing signal to the 
accelerometer output and a^ is the output of the pitch error accelero- 
meter. The quantity 



has the dimensions of time arid turns out to be the time constant for 
the decay of vertical indication errors due to erection. To first 
order (see Figure 2.2) 11-45 









+ge 


( 2 . 4 - 3 ) 


where g is the acceleration due to gravity and u is aircraft speed. 
Combining these equations yields 


e 


1 

T s + 1 
e 




( 2 . 4 - 4 ) 


Note that the steady-state vertical indication error due to a con- 
stant drift rate is the product of the erection time constant and the 
drift rate. This fact tends to set the upper limit on the size of the 
time constant for a given drift rate. 

At this point, two variations of the basic erection approach should 
be mentioned. First, some vertical gyros employ bang-bang torquing 
in which the erection angular velocity (torquing signal) is always 
either plus or minus the maximum rate depending on the sign of the 
accelerometer output except for a dead band with zero erection rate 
for small accelerometer outputs. The advantage of this design is 
simplicity of mechanization. It is more difficult to analyze and has 
no performance advantage over linear torquing except that by its - 
nature the maximum erection rate is limited. It will appear later 
that limiting the maximum erection rate helps to reduce vertical 
gyro/autopilot interaction and a linear erection system should also 
include a limiter. 

Secondly, some type of compensation network or filter may be 
inserted in the erection loop between the accelerometer output and 
the vertical gyro torquing input. Schuler tuning consists of in- 
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serting an integrator with the correct scale factor in the erection 
loop. If high-quality gyros and accelerometers are employed, Schuler 
tuning provides good performance and eliminates the problem of inter- 
action with autopilot modes. Except with inertial quality gyros and 
accelerometers, another input signal such as airspeed may be needed 
to damp the tuned erection loop. 

Another filtering approach is to insert a compensation network 
with a transfer function of the form 

(2.4-5) 

in the erection loop. The accelerometer output signals which cause 
vertical gyro/ autopilot interaction have time constants on the order 
of one or two minutes, while the drift rate which the erection 
loop is designed to eliminate usually has much slower variations, 
with time constants on the order of ten or twenty minutes. The filter 
transfer function of Eq. (2.4-5) has very high gain at low frequencies 
and yields acceptable vertical indication errors due to slowly varying 
drift rates while still having a low enough gain at autopilot interaction 
frequencies to avoid interaction difficulties. When the aircraft 
executes a 180° turn, the drift rates due to some kinematic effects 
reverse sign when referred to vertical gyro gimbal axes, while the drift 
rate due to gyro drift is likely to remain reasonably constant relative 
to the gimbal axes. Thus the assumption that total drift rate remains 
relatively constant over times of the order of ten minutes is not 
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justified if the kinematic drift terms are large. 

These alternative approaches will not be pursued further in this 
section . 

Physically, a vertical gyro with erection responds to aircraft 
motion in the same way as a very heavily damped pendulum whose pivot 
point is attached to the aircraft. In this analogy, it is assumed 
that the damping moment on the pendulum is proportional to the angular 
velocity of the pendulum relative to inertial space. If e is the angle 
between the pendulum and the vertical in the pitch plane with a 
positive value corresponding to a forward swing of the pendulum bob, 
then 


e 


U) 


2 2 
s +2 £o)S+(o 



( 2 . 4 - 6 ) 


where w = /g/£ is the natural frequency of the pendulum and £ is its 
damping ratio. Letting 


C = 



+ 



) 


yields 


e 



_1 

+_ l) (TgS+1) 



( 2 . 4 - 7 ) 


This transfer function has an extra pole which the erection loop does 
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not have. However, with a short pendulum length, the time constant of 
the extra pole is so short that it has a negligible effect on the pen- 
dulum motion. Thus if the pendulum is one foot long and the erection 

time constant T is 60 seconds, then 
e 


e 


1 

(0.0005s+l) (60s+l) 



(2.4-8) 


A heavily damped pendulum cannot actually be used by itself as an aircraft 
vertical indicator because of the difficulty of damping the pendulum 
to inertial space rather than to the airframe. 

Finally, the aircraft pitch angle 8 i indicated by the vertical 
gyro is the difference between the true pitch angle of the aircraft, 

6, and the pitch plane vertical indication error e, that is 


0. = 0-e 

l 


(2.4-9) 


2.4.2 Physics of Vertical Gyro-Autopilot Interaction 

Consider the action of a pitch hold autopilot mode. Suppose that 
the aircraft is in straight steady flight when a one degree pitch up 
command is set into the autopilot. The autopilot will rapidly bring the 
aircraft nose up one degree and continue to hold the nose up. This 
causes the aircraft to decelerate slowly towards the lower equilibrium 
speed with the new pitch angle and the given power setting. The de- 
celeration causes the bottom of the indicated vertical axis of the ver- 
tical gyro to swing forward since the indicated vertical acts like a 
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pendulum. This in turn decreases the indicated pitch angle, and the 
autopilot calls for more nose-up pitch, and the aircraft decelerates 
faster. Because of the phase lead caused by the differentiation be- 
tween aircraft speed and longitudinal acceleration, this positive 
feedback results in an oscillation in pitch or a pitch overshoot 
rather than a pitch divergence. The time scale on which the inter- 
active motion takes place is on the order of the erection time con- 
stant, that is minutes. Thus, when the relatively fast Mach hold 
and altitude held loops are employed as outer loops around the pitch 
attitude loop, their performance is not significantly degraded by 
the interaction, just as a pilot can easily control the slow phugoid 
mode of the aircraft and may not even know that it is present. 

2.4.3 Pitch Transfer Function Including Erection 

Since the interaction between the vertical gyro and autopilot 
modes occurs at low frequencies, on the order of one radian per minute, 
while a digital autopilot would operate with a sampling rate of several 
samples per second, the autopilot transfer function can be adequately 
represented for the purposes of this analysis as an equivalent s-plane 
continuous system transfer function. 

It will be assumed that the longitudinal autopilot has an inner 
pitch damping loop of the form shown in Fig. 2.3. 



Figure 2.3 Pitch damping loop 
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If the pitch damping of the bare aircraft meets the requirements of 
the other autopilot modes, the commanded pitch rate signal can be 
fed directly into the actuator (without pitch rate feedback), and no 
change in the subsequent calculations will result. It is now desired 
to obtain the transfer function between the commanded pitch rate q c 
and the indicated pitch angle 6^ employing the erection loop dynamics 
derived above. 

A block diagram of the signal path between commanded pitch angle is 
shown in Figure 2.4. 



Figure 2.4 Signal Rath from commanded pitch rate 
to indicated pitch angle 


From Figure 2.4 or Eqs . (2.4-5) and (2.4-9), it follows that 


B = su 
i g(Ts + l) 


(2.4-10) 


The denominator of the transfer function from q c to 0^ will contain 
the poles of the aircraft-pitch damper combination, that is actuator. 
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damped short period, and phugoid poles, plus the erection pole (T s+1) . 
For closure of the pitch attitude loop, it is important to know the 
location of the transfer function zeros since the low-frequency closed- 
loop poles will approach these zeros. Thus, Eq. (2.4-10) will be written 
with a common denominator 


(su+g6)+gT e s0 

gCT e S+l) (2.4-11) 


From the aircraft X-axis force equation, it follows that 


su + g6 = X 


(2.4-12) 


where X denotes the sum of the nongravitational X-axis forces, that 
is, the X components of aerodynamic force and thrust, divided by the air 
craft mass. Combining Eqs. (2.4-11) and (2.4-12) yields 


X + g T e s0 

(T e s+1) 


(2.4-13) 


Eq. (2.4-13) indicates how the zeros of the q c , 0^ transfer function 
vary with the erection time constant T . If T is very large, the 
zeros approach the zeros of the normal q c , 0 transfer function 
with an extra zero at the origin which nearly cancels the erection pole, 
the latter being .very close to the origin in this case. On the other 
hand, if the erection time constant is short, the zeros of the q c , 

0^ transfer function approach the zeros of X. It is desirable, at 
this point, to obtain an idea of the location of the q c , X transfer 
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function zeros. 


If elevator lift- is ignored, there are two integrations between elevator 
deflection and X-force. Thus the q c> X transfer function has two zeros. 

The X-force is not very strongly excited in the phugoid mode, the only 
significant phugoid frequency component of X-force being drag variation, 
which is small since the phugoid is lightly damped. That is, in the 
phugoid mode. 


<$a = 0 

(2.4-14) 

<5u - -gS0 

(2.4-15) 

<$X = <5u + g<50 : 0 

(2.4-16) 


Thus, one would expect that the zeros of the X transfer function nearly 
cancel the phugoid poles, and it is in fact true that the zeros of X 
are near the phugoid poles. If elevator lift is considered, X force 
is only one integration from elevator deflection, and. X has a third 
zero with a very short time constant (a fraction of a second) . This 
zero has little effect on pitch dynamics and will be ignored in the 
following discussion. 

Root locus techniques may now be applied to (2.4-13) to plot 
the zeros of the q £ , 0^ transfer function as a function of the erection 
time constant. The 0 transfer function has a fast zero with a time 
constant in the short period range, which corresponds to angle of 
attack adjustment with a pitch hold autopilot, arid also a slow 
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zero with a time constant on the order of a minute, which corresponds 

to aircraft speed adjustment with a pitch hold autopilot. Figure 2.5 

shows the locus of q £ , 0^ transfer function zeros as a function of 

erection time constant, T . 

* e 



□ * X transfer function zeros 

►— direction of zero locus with decreasing T e (increasing 

erection loop gain). 

Figure 2.5 Locus of q c to transfer function zeros. 


2.4.4 Dynamics of Pitch Hold Mode with Erection Loop Interaction 
Figure 2.6 is the block diagram of a pitch hold autopilot. 
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Figure 2.6 Pitch hold autopilot loop 


In this autopilot mode, the difference between the commanded pitch 
angle and the pitch angle indicated by the vertical gyro is multi- 
plied by the pitch gain K Q and serves as the pitch rate command for 
the- pitch damping loop. 

For comparison purposes. Fig. 2.7 shows the root locus for 
the poles of the transfer function from commanded pitch angle to 
true pitch angle as a function of pitch gain with a perfect vertical 
gyro, that is with T g * 



Figure 2.7 Root locus tor pitch hold mode with perfect vertical 
gyro as a function of pitch gain 
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The only thing which is critical about the choice of the pitch gain in 
the perfect vertical gyro case is that it be chosen high enough so 
that the phugoid pole which remains in the low-frequency range is 
driven to within a few percent of the low-frequency zero. If this 
is hot done, the residue on the low-frequency pole will be too high 
and the aircraft nose will appear to drift slowly for a long time 
following each command input. 

The root locus for the case of a vertical gyro with a finite 
erection time constant follows much the same pattern except that there 
is an extra pole due to erection. Figure 2.8 shows -the root locus 
for the pitch hold mode for the normal case when the erection time con- 
stant is somewhat longer than the time constant of the slow zero of the 
q c to 6 transfer function. Again, the poles remaining in the low- 
frequency region of the s -plane all approach zeros and if a suf- 
ficiently high pitch gain is employed so that the poles are driven 



Figure 2.8 Root locus for pitch hold mode with finite vertical 

gyro erection time. Erection time constant several times 
longer than slow q c> e transfer function zero time constant 
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close to the zeros, the indicated pitch angle will track pitch angle 
commands without any slow drift following step commands, if an ex- 
tremely short erection time constant is employed, the zeros of the 
q c> 0^ transfer function lie near the phugoid poles with the result that 
closing the pitch hold loop no longer damps the phugoid. This root 
locus is shown in Figure 2.9. Such a short erection time constant 
would not be used in practice, but even in this case the indicated 
pitch angle would track the commanded pitch angle well. 


high frequency 


damped short 
period 



4 

* 

actuator 



low frequency 

€ 




erection 

loop 



phugoid 


O 


Figure 2.9 Root locus for pitch hold mode with very 
short erection time constant. 


Now the transfer function relating commanded pitch angle, 6 c to 
true pitch angle 8 will be calculated. It should be noted that the 
artificial horizon provides the pilot with the indicated pitch angle 
and that his only indication of true pitch angle is the actual hori- 
zon and anomalous airspeed and altitude behavior which does not relate 
well to the history of artificial horizon motion. From the block 
diagram of the pitch hold autopilot loop shown in Figure 2.6, it 
follows that the transfer function from commanded pitch angle to 
pitch rate command is 


II-SS 


. I_h \ 

' u v9./ qc ^ > 


(2.4-17) 


where T. , denotes the q to 9. transfer function derived above. 

V q c c 1 

Multiplying Eq. (2.4-17) by the q c to 9 transfer function, which will 
be denoted by , yields the .desired transfer function from 6^ to 

true pitch angle 9: 


Vfi/n (S) 

/ 9 9/q c \ 


(2.4-18) 


Since T . (s) and T Q /q (s) have the same denominator except that 

/q c l C 

T . has an extra pole (T s+1) from the erection loop, the denominators 

9./q c c 

of the transfer functions in Eq. (2.4-18) cancel out, and the zeros of the 

9 to 9 transfer function are the zeros of T. , (s) plus a zero at 

c 0/q c 

the erection time constant. Finally, the poles of the 0 to 9 trans- 
fer function are the closed -loop pitch hold mode poles . 
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Figure 2.10 Poles and zeros of 9 to 9 transfer function for 
the case when erection time constant is several 
times longer than time constant of low frequency 
zero of T 0/q (s). 
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Figure 2.10 is an s -plane plot of the poles and zeros of the 0 C to 
9 transfer function for the case illustrated in Fig. 2.8, in which the 
erection time constant is several times longer than the time constant 
of the low-frequency q £ to 0 transfer function zero. Note that the 
two poles in the low-frequency region are not very close to the 
low-frequency zeros. These poles lie to the left of the right -most 
zero# which indicates that they_ participate in an over-shoot rather 
than a slow rise time when a step input is applied. These poles 
are particulary objectionable because they have time constants 
which are minutes long. Their effects last long after the command 
input has been applied and give the pilot the impression that the 
autopilot does not provide long-term attitude stabilization if he can 
detect their presence. 

Figure 2. 11. is an s-plane plot of the poles and zeros of the 
0 c to 0 transfer function for the case illustrated in Fig. 2.9,.. in which 
the erection time constant, T , is very short. In this case the 

V 

phugoid poles are essentially the same as those of the bare airplane 
and are not near any zeros. Thus, when a step command is applied, 
the phugoid mode is strongly excited and then decays according to 
its small damping ratio. This case is included to show the direction 
of the trend of decreasing erection time constant but does not 
correspond to a practical system. 
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2.4.5 Dynamics of Altitude Hold Mode with Erection Loop Interaction 
In designing an altitude hold loop in which altitude error is 
to be fed to the elevator, the simplest approach would be to employ- 
scaled altitude error as the pitch rate command, q c> to the pitch 
damper. Unfortunately, there is too much phase lag at low frequencies 
between q c and altitude, and this configuration does not provide a well 
damped altitude response. This difficulty can be removed in two 
ways. First, an altitude rate signal can be added to the altitude 
error signal to provide the necessary phase lead. This approach 
works well in the automatic landing mode where data from a radar al- 
timeter and a vertical accelerometer are mixed to provide a good al- 
titude rate signal. Since the vertical gyro does not furnish signals 
for this mode, the possibility of vertical gyro-autopilot interaction 
is eliminated. However, in cruise a good altitude rate signal may 
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not be available, and a second altitude hold. configuration may be em- 
ployed. In this configuration, the altitude error is scaled by an 
altitude gain, K^, and used as a command input to the pitch hold mode. 
If the aircraft is operating on the front side of the power curve or if 
an auto-throttle loop is employed to keep airspeed constant by varying 
power setting, the phase lag between commanded pitch angle and al- 
titude at low frequencies (on the order of the phugoid frequency) is 
less than ninety degrees and a well damped altitude hold loop results. 
This altitude hold loop configuration does leave open the possibility 
of vertical gyro-autopilot interaction and will be investigated 
below. 

Figure 2.12 is a block diagram of the altitude hold loop. 

The transfer function between commanded pitch angle 6 c and altitude 
rate.h will be derived in the same way that the 0 c and 0 transfer 
function was obtained. Thus 


h = T h/q c < S > % 


and employing Eq. (2.4-17) 


h = ( 


K e T h/, c < s > 


(2.4-19) 


(2.4-20) 


The denominators of the transfer functions on the right hand side 
of Eq. (2.4-20) cancel each other except for' the erection loop pole 
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(T s+l) , and the zeros of the 0 to h transfer function are thus the 

V W 

zeros of T^^ (s) plus a zero at the erection loop time constant. The 
poles of the 0 C to h transfer function are the closed- loop poles of 
the pitch hold loop. Ignoring elevator lift (which contributes 
two zeros- with very short time constants), the q c to h transfer func- 
tion has a single zero which lies in the left half of the s-plane 
if the aircraft is operating on the "front" side of the power curve 
and lies in the right half plane if the aircraft is operating on the 
"back" side of the power curve. This zero has a long time constant, and, 
if it lies in the right half plane, its presence makes the design of 
any altitude hold loop difficult (although still theoretically 
possible) . Normal practice is to employ an auto-throttle to control 
airspeed with power setting when operating the altitude hold mode 
on the back side of the power curve. The presence of the auto- 
throttle loop moves the 0 £ to h zero into the left half plane, and, if the 
speed resolution of the auto-throttle is good so that airspeed really 
remains constant, the problem of vertical gyro- autopilot interaction 
is eliminated. Thus it will be assumed that the aircraft is. operating 
on the front side of the power curve with a fixed power setting and 

hence the q to li transfer function zero lies in the left half 
c 

plane . 



Figure 2.12 Block diagram of altitude hold loop. 
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For comparison purposes. Figure 2.13 shows the root locus 
for the closed loop poles of the altitude hold loop with a perfect 
vertical gyro (T e = •) as a function of altitude gain, 1^. 
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Figure 2.13 Root locus of altitude hold loop with perfect uertical 
gyro as a function of altitude gain, K^. 

The altitude gain must be chosen large enough so that the pole which 
was originally at the origin approaches within a few percent of the 
low-frequency zero. If is not high enough, the residue of the 
low-frequency pole will not be small for a step input, and the al- 
titude will take a long time to travel the last few percent of the 
way to its final value. Physically, what happens is that, if the auto- 
pilot is commanded to gain altitude, the aircraft loses speed while 
climbing and doesn't regain its level -flight equilibrium speed until 
long after the desired altitude has been reached. This speed error 
causes a small altitude error which slowly disappears as equilibrium 
speed is regained. If is too .high , the poles in the medium- frequency 
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range (which originally were the phugoid poles) will not be well damped. 
If this is a problem, lag-lead compensation can be included to provide 
high gain at low frequencies and medium gain at medium frequencies. 

An auto^trim mode is also useful for providing high gain at low fre- 
quencies . 

Figure 2.14 shows the root locus for the closed-loop poles of 
the altitude hold loop with a finite erection time constant. The only 
difference in this case is that the extra zero at the erection time 
constant attracts the extra pole due to the erection loop, and the 
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Figure 2. 14 Root locus of altitude hold loop with finite erection 
time constant 

altitude gain must be chosen high enough to ensure that both 
low-frequency poles are close to their respective zeros. Thus the 
pitch erection loop has little deleterious effect on altitude hold 
mode operation. 

Dynamics of Mach Hold Mode with Erection Loop Interaction 
In the Mach hold mode, the difference between actual 
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and co mman ded speed is scaled by a Mach gain and employed as a 
pitch angle command. Figure 2.15 is a block diagram of this mode. 
The zeros of the transfer function from commanded pitch angle 6 C 



Figure 2.15 Block diagram of Mach hold mode. 


to airspeed u are the zeros of the q £ to u transfer function plus 
a zero at the erection time constant. The poles of the e to u trans- 
fer function are the closed -loop poles of the pitch hold mode. 
Neglecting elevator lift, the q c to u transfer function has a single 
zero which lies in the short -period frequency range. Figure 2.16 
shows the root locus of the Mach hold mode with a perfect vertical 
gyro (T g = <») as a function of Mach gain K m - The only limitation 
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Figure 2.16 Mach hold mode root locus with perfect vertical 
gyro as a function of Mach gain 
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on Mach gain in this case is that it not be so high that the poles 
in the short -period frequency range are poorly damped. Figure 2.17 shows 
the root locus of the Mach hold mode with a finite erection time 
constant as a function of Mach gain K . In this case the Mach 
gain should be chosen high enough to drive the erection loop pole 
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Figure 2.17 Mach hold mode root locus with finite erection 
time constant as a function of Mach gain. 


close to the erection time constant zero in order to prevent this pole 
from causing a noticeable, slowly decaying speed overshoot. If such a high 
gain destabilizes the poles in the short-period frequency range, 
lag-lead compensation may be employed to provide high gain at low 
frequencies and low gain at high frequencies . 

Thus, erection loop -autopilot interaction causes no serious 
problems in Mach hold loop design. 
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2.4.6 Approximate Time Constant of Low-Frequency Zero in 9 Transfer 
Function ’ ' ~~~ — 

In order to obtain a simple model of the effect of vertical gyro 
erection on pitch hold mode dynamics, it is necessary to show-that the 
low-frequency zero of the q c to 0 transfer function is closer to 
the s -plane origin than the q c to X transfer function zeros which are 
near the phugoid poles. This allows the X zeros to be ignored. The 
approximation process also provides insight into the airspeed adjustment 
which takes place with pitch angle changes and leads to interaction with 
the vertical gyro. 

The q to 0 transfer function zeros are the characteristic 
roots of the aircraft equations of motion when the elevator deflection 
fie is adjusted to balance the pitching moment equation with' 0 remaining 
constant. That is, the zeros are the characteristic roots of the X 
and Z axis force equations with 0 locked and the elevator lift calculated 
from the elevator deflection required to keep the pitching moment 
equation balanced. These characteristic roots correspond physically 
to the dynamics of the aircraft with a very tight pitch hold loop. 

To analyze the aircraft dynamics in this case, consider a step 
increase in pitch angle. The excess lift caused by the jump in angle 
of attack causes the flight path angle to start to increase, decreasing 
the angle of attack until lift again equals weight at the current 
airspeed. This adjustment takes place rapidly and corresponds to the 
high-fiequency zero of the q c to 0 transfer function. With the in- 
creased flight path angle, the component of gravity along the flight 
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path will be larger, and the airspeed will begin to decrease. As air- 
speed drops, the dynamic pressure decreases, lift becomes slightly 
less than weight, and the flight path angle decays toward its new 
equilibrium value in such a way that the increase in angle of attack 
keeps lift and weight nearly balanced. This slow airspeed decay 
corresponds to the low-frequency zero of the q^ to 9 transfer function. 
Since the lift adjustment is rapid and results in lift being close 
to weight, it will be assumed for the approximate analysis of speed 
decay that lift equals weight. This determines angle of attack a 
as a function of airspeed u. 

L 6a + L 6u = 0 (2.4--21) 

a u 



(2.4-22) 


(2.4-23) 


Since the rate of change of airspeed is the sum of the forces per 
unit mass along the flight path and thrust is assumed to be constant. 


dtfu 

“ 3 ? 


-g 


3u 


6u - g $Y 


X2 .4-24) 


where 3(D/L)/3u is the derivative, with respect ro trim speed, of the drag- 
to-lift ratio as a function of trim speed (speed at which lift equals 


11-69 



weight for a given angle of attack), and y is the flight path 
angle. Finally, 

6y = 66 - 6a (2.4-25) 


and combining equations (2.4-23), (2.4-24) , _ and (2.4-25) yields 
gT 

6u = - YTn~ 69 (2.4-26) 

u 


where 


u 


3u 


+ 2 


K Ik ) 

u \'L / 


(2.4-27) 


T u is an approximation to the low-frequency characteristic root of 
the aircraft dynamical equations in this case and thus approximates the 
low-frequency zero of the q c to 8 transfer function. 

The angular frequency of the phugoid oscillation, oj^, is given 
approximately by the formula 


w 


ft f 


(2.4-28) 


and thus 


i 3 <r) 

T ■ 8 
u 


Ju 


/2 




(2.4-29) 


If the aircraft is operating at the speed for maximum, L/D, the contribution 
of the term g(3(D/L))/3u to will be zero, and if the aircraft is 
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flying faster than this speed, the g(9(L/D))/9u term will increase T . 
Thus T u can be expected to be roughly approximated by 



(2.4-30) 


T = (2.4-31) 

u w p 

This calculation indicates that the low frequency zero of the q c to 
0 transfer function is several times closer to the s -plane origin 
than the phugoid poles. Eq. (2.4-26) also gives a fair approximation 
at low frequencies to the relationship between aircraft speed and true 
pitch angle with a tight pitch hold loop. 


2.4:7 Approximate Low-Frequency Behavior of Pitch Hold Mode with Interaction 
Let D(s) denote the characteristic polynomial of the aircraft- 
pitch damper combination, that is the product of the actuator, damped 
short period, and phugoid poles. Then at low frequencies the high- 
frequency zero of the q c to 0 transfer function may be ignored, and 


c 0 C T u s+1 ) 


(2.4-32) 


where C Q is the q c to 0 static gain. Since the zeros of the q c to X 
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transfer function lie near the phugoid poles and are, according to 

the analysis immediately above, several times farther from the s- 

plane origin than the low-frequency zero of T . (s), they will be 

e /<l c 

ignored, and at low frequencies 

T x/q c ( s > SIFT ' 2 - 4 - 33 > 

where C Y is the q to X static gain. Since a constant q command 
yields a steady -state condition with constant elevator deflection, 
speed, and pitch angle, and since 

X = g£+ g e (2.4-34) 


it follows that 

^steady state “ ^steady state 
and therefore that 


(2.4-35) 


C x = gC Q (2.4-36) 

Substituting Eqs . (2.4-32) , (2.4-33), and (2.4-36) into Eq. (2,4-13) yields 
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W 1 


8C 9 {T e s(T u sn)*l) 

(T e s+l)D(s) 


(2.4-37) 


Under the assumption that the pitch gain in the pitch hold mode is fairly 
high, the closed-loop low-frequency poles will be close to the low fre- 
quency zeros of T g , (s), and, ignoring the high-frequency closed-loop 

°i /<l c 

poles, the denominator of the commanded pitch angle 0 to true 
pitch angle 0 transfer function will be approximately 


T e s(T u s+l) + 1 


(2.4-38) 


It was found in the discussion following Eq. (2.4-18) that the numerator 
pf the 0 c to e transfer function consists of the zeros of (s) 

plus a zero at the erection time constant. Thus, at low fre- 
quencies , 


C(T u s+l)(T e s+l) 


T 0/0 c (s) = T e s(T u s+i)+l 


(2.4-39) 


where C is the 0 c to e static gain. Unless automatic trim or some 
other form of pure integration is employed in the forward loop, the 
static gain C will be slightly less than one. However, for a tight 
pitch hold loop, C will be close to one, and thus 


(T u s + l)(T e s + l) 
T e/e c Cs)= T e s (T u s+1)+1 


(2.4-40) 
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Before the properties of the approximate pitch hold mode trans- 
fer function given in Eq. (2.4-40) are discussed, the transfer func- 
tion will be derived in another way which is easier to understand 
physically. In the pitch hold mode block diagram. Fig. 2.6, the 
pitch hold mode nulls the error signal 

0 c" 0 i = V e+e (2.4-41) 

where e is the pitch component of the vertical indication error. 

With a tight pitch hold loop the low-frequency component of this 
error signal will be small, and it may be assumed that 

0 = 0 c -0 i = 6 c -0+e (2.4-42) 

and the true pitch angle, 0, of the aircraft is given by 


6 = e c + e 


(2.4-43) 


It has already been shown that, with a tight pitch hold loop, the speed 
of the aircraft is related to its true pitch angle by Eq. (2.4-26), 
which is repeated here 

g T 

6u = - 60 (2.4-26) 

u b 

Moreover, the pitch vertical indication error e depends on aircraft 
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longitudinal acceleration and is given by Eq. (2,4-4) 


- ~ s u 
e ~ C T e s + l 3 g 

Thus the vertical indication error e is given by 

T s 
u 

e " (T u s + 1) (T e s+1) 9 

and combining Eqs . (2.4-43) and (2.4-44) yields 

(T u s+l)CT e s+l) 

T q/q^ s) = T e s'cr u s+i)+i 


(2.4-4) 


(2.4-44) 




which is the same expression as Eq. (2.4-40). Combining Eqs. (2.4-40) 
and (2,4-44) yields 



T s 
u 


T e 5 ( T u s+1 ) +1 


(2.4-45) 


By either Eq. (2.4-43) or direct computation from the approximate 

T 0 / 0 (s) transfer function of Eq. (2.4-40), it follows that the transfer 

function relating pitch angle command 9 C to pitch following error 

(0-0 c ) is, to the order of approximation, the same as T £ / 0 (s) . Thus, 

c 

Eq. (2,4-45) will be used to determine the pitch following error. This 
makes sense physically since it implies that, with a tight pitch loop, 
the low-frequency pitch following error is caused entirely by the 
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vertical gyro inaccuracy. 

The response of pitch angle following error, or equivalently ver- 
tical indication error, c, will now be found for a step pitch command 
input . Let 



(2.4-46) 


and rescale time so that the time constant T u of the low-frequency 

zero of the q to 0 transfer function is the unit of time. With this 
l c 

time scale Eq. (2,4-45) becomes 


T e /0 * — ! — 

e ' °e Rs+Rs+1 


(2,4-47) 


and the response to a unit step is 

>- t/2 sinh(yi7| 


2e' 


e(t) = 


for R > 4 






for R = 4 


(2.4-48) 


o -t/2 . 

2e sin 


e(t) = 


(VF^ ?) 


for R < 4 




Finally, it follows from these expressions that for the critically 
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damped case when R = 4 the pitch overshoot is l/2e, or 18%, and for the 
underdamped case of R = 2 the pitch overshoot is (/T - 1) , or 41%. 

2.4.8 Conclusions 

In the simplest type of attitude reference system the vertical 
drift due to earth angular velocity and motion of the aircraft around the 
earth is not compensated directly and must be nulled by the erection 
loops. Since this drift rate is on the order of 15 degrees per hour 
Cangular velocity of the earth), it follows by Eq. (2.4-4) that the 

erection time constant cannot be chosen much longer than two minutes if 

« 

the vertical indication error is to be held to an acceptable level 
such as one half degree. Furthermore, according to Eq. (2.4-27), for 
a true airspeed of 600 feet per second and L^/L = 5, the pitch hold 
speed decay zero time constant, T u » will be on the order of 50 seconds. 
Thus, in cruise, the ratio of T g to will be near two, and the true 
pitch angle response of the pitch hold autopilot mode to a step pitch 
angle command will display a large overshoot, on the order of forty per- 
cent, which will take place over a time period of several minutes fol- 
lowing the step input. Although the true pitch angle displays a large 
overshoot in this case, the indicated pitch angle tracks the pitch 
command input well, and the pilot of the aircraft would not be aware 
of the true pitch angle overshoot except through reference to the true 
horizon, or because airspeed and altitude variations do not correlate 
well with the indicated pitch angle displayed by the artificial hori- 
zon which is driven by the attitude reference system. 
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Since the pilot uses pitch angle as a reference to aid him in 
controlling airspeed and rate of climb rather than as a variable to 
be controlled for its own sake and since indicated pitch angle re- 
sponds well to command inputs, it may be argued that the overshoot in 
true pitch angle does no harm, especially since it is so slow, and 
that, even with its relatively poor true pitch angle response, the 
performance of the pitch hold autopilot mode in this case is adequate. 

If better true pitch angle response is desired, some means must be 
found to reduce the magnitude of pitch plane vertical indication errors 
caused by longitudinal acceleration. The most direct approach would 
be to include computed corrections or- employ Schuler tuning' to eliminate 
the vertical drift due to earth rotation and aircraft motion over the 
surface of the earth, so that the vertical erection loops are required 
only to null vertical drift due to gyro drift. Then, if good- 
quality gyros with drift rates of one tenth earth rate or better are 
employed, the erection time constant may be increased by a factor of 
ten, and vertical indication errors due to longitudinal acceleration 
will be reduced by a factor of ten, and the true pitch angle response 
to step inputs will display only a small overshoot. If Schuler tuning 
is employed with good-quality gyros, vertical erection loops may not be 
required at all, since the Schuler tuning loops tend to bound the errors 
caused by vehicle motion and earth rotation. 

Another approach, which will reduce the true pitch angle over- 
shoot for large pitch commands, is to limit the magnitudes of the erec- 
tion signals. Since in subsonic flight the true vertical will never 
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rotate faster than thirty degrees per hour due to aircraft motion and 
earth rotation, the magnitude of the erection signals can be limited 
to this value. With a large step pitch angle command, the component 
of the erection signal caused by longitudinal acceleration will be 
larger than thirty degrees per hour, and. part of the false erection 
signal will be removed by the limiting action. 

It would also be possible to sense rate of change of airspeed with 
a pressure instrument and apply this signal to the vertical gyro as an 
additional erection signal to null out the longitudinal acceleration 
sensed by the erection loop accelerometer. This extra signal provides 
weak negative feedback so that, even if the scale factor of the sensor 
is incorrect, it should not cause a stability problem. However, since 
this sensor drives the vertical gyro, which in turn drives the artificial 
horizon display, the output of the sensor would need to be fairly re- 
liable. This sensor would be sensitive to changes in the longitudinal 
component of wind velocity , and this sensitivity might be an undesirable 
error source. 

Finally, if the pitch hold mode is operated in conjunction with an 
airspeed hold mode (auto-throttle) which maintains constant speed by 
adjusting power setting, the interaction between the vertical gyro and 
the pitch hold mode will be eliminated. 

When the pitch hold loop is employed as an inner loop for automatic 
altitude or speed control, the outer loop dynamics are not significantly 
degraded by the interaction between the vertical gyro and the pitch 
hold mode. However, altitude or airspeed command inputs will cause 
true airspeed variations which will tilt the vertical gyro and result 


11-79 



in incorrect pitch angle indication on the artificial horizon. Hiis 
vertical gyro tilt appears in the transfer functions for the altitude 
and mach hold modes as the closed loop pole which lies near the zero 
located at the erection time constant. 

2.5 System Configurations 

Two attitude reference systems are proposed for use with the digital 
autopilot. The first configuration is a system providing light computer 
loading. This system employs an inertial platform for navigation and 
as a primary attitude source and two vertical gyros and two directional 
gyros as backup attitude sources. Comparison between various atti- 
tude angle sources for failure detection and isolation would be done 
in the digital computer since dissimilar attitude sources must be 
compared. This system would tolerate only one gyro failure since the 
second failure might not be identifiable. If it were desired to be 
able to tolerate two gyro failures, another directional gyro and 
vertical gyro would be added. Body -mounted rate gyros and accelero- 
meters would be mounted with three sensor input axes parallel to each 
aircraft body axis with their output signals voted to provide simpli- 
city of data processing. This approach requires nine rate gyros, but 
tile saving of one rate gyro would not justify the extra complexity of 
the eight gyro system described in Section 2.3 if only a single gyro 
failure is to be tolerated. If two rate gyro failures must be toler- 
ated, the eight instrument configuration of Section 2.3 would be employed. 

The second proposed configuration involves more development 
risk and employs a small number of sensors while requiring a large 
data processing capability. Attitude information would be obtained 
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by integrating the outputs of body mounted rate gyros as described in 
Section 2.2. Six gyros would be employed as body -mounted rtite gyros 
in the first redundancy configuration described in Section 2.3. Three 
gyros would be of high quality and their outputs would be employed 
for navigation as well as attitude reference while the other three 
gyros would be less expensive lower quality gyros to provide a backup 
for attitude determination in case of primary gyro failures. Six 
accelerometers would also be employed in the first redundancy con- 
figuration described in Section 2.3. Three of the accelerometers would 
be of high quality for use in navigation while the remaining three 
accelerometers would be of lower quality to provide backup erection 
signals for attitude determination and hackup acceleration signals 
for autopilot use in case of primary accelerometer failures. This 
system will tolerate two gyro and two accelerometer failures. 



CHAPTER III 


THE DIGITAL COMPUTER 


The core of a digital autopilot is the central computing element, 
which consists of one or more general-purpose digital computer pro- 
cessors. The aggregate unit must provide both the computing power and 
the reliability required to perform the delicate and complex tasks 
demanded of advanced autopilots . 

Any of several currently available flight computers can provide 
the necessary computational power. Examples are the IBM 4 PI and the Data 
General Nova (flight packaged). Unfortunately, although a single such 
processor does provide the necessary computational power, it does. not 
provide the required reliability. It is concluded therefore that the 
central computing element must consist of three identical processors 
configured so as to provide backup capacity in the event of failure 
of any single processor. Systems employing only two processors fall 
short of a full "fail-operational, fail -passive" specification. 

Within the three-processor system, consideration has been 
given to a configuration which allows use of current machines with a 
minimum of modification. Hardware modifications are minimized in order 
to avoid unnecessary complications and to preserve the already limited 
reliability of a single processor. 

3.1 Reliability Requirements 

In conventional analog autopilots the various operational modes 
are implemented by setting up several control loops. The feedback con- 
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trol devices are constructed of analog components and dedicated solely 
to the control of a single loop. While cross links among such loops 
occur, these loops remain sufficiently distinct so that various com- 
ponents are labeled, for example, the pitch control computer, yaw com- 
puter, roll computer, automatic throttle/speed control computer, etc. 

When mode sequencing or variable gains are required, specialized hard- 
ware is constructed and often designated by such names as sequencing 
computer, flap limiter, programmer computer, and so on. A digital auto- 
pilot replaces the dedicated hardware used in implementing each of the 
many separate control functions with a single piece of hardware, a 
digital computer. 

The digital computer serves as the heart of the control system. 

By time-sharing the computational capacity among the several loops, the 
computer serves as the feedback control element for many separate pro- 
cesses . These processes may range in complexity from simple pitch 
control to fully automatic landing control. In addition, the computer 
may serve as the control element in nested control loops. As an example, 
navigation computations are used to provide aircraft positional informa- 
tion. The guidance control loop uses this information to generate a 
desired heading for the aircraft. This heading command then serves as 
the input to the heading control loop of the autopilot. The same com~ 
puter may serve as the control element to close both loops. 

It is clear that a digital computer failure presents the prospect 
of simultaneous breakdown in all control loops. With so much of 
the control centered in a single component, it is not surprising that 
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great reliability is demanded of that component. An interesting con- 
trast develops here between analog and digital implementation. Within 
an analog design, effort can be concentrated on particular elements of 
the system so as to enhance overall safety. For example, basic 
stability augmentation functions may be implemented with redundant 
hardware and with high-cost, high-reliability components. Functions 
that do not affect flight safety may be implemented by less costly means, 
with overall operating ease and convenience, as balanced against cost, 
being the decisive factor governing the final choice of components for 
these subsystems. In a digital design the central computer will pro- 
vide a uniform level of reliability for all the tasks it performs. 

This level must be high enough to meet the requirements of the most 
demanding task. The primary point to be made here is that a digital 
counterpart does not really exist for the so-called "non-safety-related 
failures" in analog systems. 

Unfortunately, the required reliability cannot be achieved with 

a single non-redundant computer. If we assume a mean time before failure 
4 

(MTBF) of 10 hours for a single computer, there is a probability of about 

_3 

10 of a computer failure during a single day of average use (10 hrs) . 
There is, of course, a much smaller chance that a failure will occur while 
the plane is in a critical maneuver. For example, if a plane makes 
four landings a day and the landing maneuver takes about 6 minutes per 
landing, there is a probability of 4*10”^ of an autopilot failure during 
a landing. Oyer a twenty-year lifetime with a fleet of 500 planes, 
several failures during landing become almost a certainty. 
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Reliability can be increased if there are two or more computer^, 
aboard the aircraft. The object is to detect a failure on the first 
computer and then to allow the standby computer to take over the 
function of the first computer. From a reliability viewpoint it is 
desirable to keep all standby computers in a powered-down state in 
order to increase component life. Typically the failure rate of un- 
powered components is lower than that for fully powered units. How- 
ever, the task of detecting a computer failure quickly is not a 
trivial one; thus it will probably be necessary to keep the spare 
computers "powered up" and operating, solely to aid in the detection 
of failures. The increased rate of failures in the spares is an un- 
fortunate consequence of the need for their continuous operation. 

3.2 Single Computer Failure Detection . 

In order to show that active spares are necessary, let us first 
examine mechanisms whereby a single computer might recognize a failure 
within itself. If the failure is a minor one, the computer may be able to 
recognize it solely by subjecting certain critical calculations to 
reasonableness checks. However, some minor and even transient com- 
puter failures can generate spurious branches in the execution se- 
quences of a program, resulting in total collapse of the computer- 
supplied functions. If this happens, reasonability checks on calcula- 
tions are not performed; even the control calculations themselves are 
not performed. The straightforward solution to this problem is to 
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REDUNDANT SENSOR LINES 


Figure 3.1 Dual Computer Configuration 
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provide a hardware "night watchman". The night watchman is a simple 
timing device which must be visited periodically by the programming. 

If more than a few milliseconds pass without the device being reset, 
it signals a failure. Thus disastrous failures are also detected. 

In the grey area between total failurd and minor failure, detection 
cannot be assured. This grey area can be made smaller at the cost 
of more numerous and more complex reasonableness checks, hut in the 
end even this may prove inadequate. Also, as a greater percentage 
of the computer's time is designed into non-productive work, the 
processor power must be increased in order to provide the neces- 
sary level of useful work. The more powerful processor may cause 
further reliability problems, as large processors naturally tend to be 
less reliable than smaller ones. From the considerations above, one 
might estimate that somewhere between 50% and 95% of all failures can 
be detected by a single computer operating alone. Even the higher 
figure of 95% seems woefully inadequate. 

3.3 Dual Computer Configuration 

Two identical processors may be connected together as shown 
in Figure 3.1. Each has access to all sensor inputs and can 
manipulate all control channels to the aircraft. In addition each 
processor can communicate with the other over a direct link. In a 
normal mode of operation Computer 1 would control the aircraft, and 
Computer 2 would monitor its performance. If a failure is detected. 
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both computers would enter extensive self-rcheck routines in an effort 
to locate the failure in either Computer 1 or Computer 2. Since this self 
check is non-recurring, it could be much more extensive than that which 
might be possible if only a single active computer were used and 
self check were continually run as the error detection mechanism. 

After the location of the failure has been pinpointed, the affected com- 
puter is disengaged, and the remaining computer continues autopilot func- 
tions alone. In order to assure a high probability of fail-passive capa- 
bility, the remaining computer will be forced to execute self- 
check procedures continuously. Since a maximum of reliability is 
required for such aircraft maneuvers as automatic landing, it is 
suggested that all non-safety -related functions, such as navigation 
and data logging, he abandoned after detection of the first failure in 
order to allow a maximum amount of time for self-check procedures in the 
remaining computer. 

This system has two major weaknesses. First, after detection 
of the first failure there is a small probability that it will be im- 
possible to pinpoint which computer is the source of the failure. 

Under these circumstances , one may be forced to make an arbitrary 
choice which could result in placing the failed unit into service 
and removing the good unit. Secondly, fail-passive operation of the 
single unit, after a failure has been isolated, is not certain since 
the detection of the second failure occurs only through reasonableness 
testing. 
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Figure 3.2 Triple redundant computer. 
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3.4 Triple Computer Configuration 

A triple computer configuration provides a means of overcoming these 
problems. The most immediate gain from the triple configuration is 
the simplification of error detection and identification. In a dual 
system, if computer outputs are compared and found to differ, there 
is no way to tell, without self-checks, which computer is at fault. 

Thus, while the error is known to have occurred, it is impossible to 
say, without further knowledge, which computer is still good and should 
continue to be used. With three computers, this problem is solved by 
using majority voting, or "2 out of 3 voting”, as it is more commonly 
referred to. 

In addition to simplifying error location, the triple configura- 
tion enables the loss of a single computer to be more readily tolerated. 
In such a situation, one can fall back to a dual system and still re- 
tain most of the system capabilities. Finally, as system capability 
remains high even after a failure, maintenance can be postponed to a 
regularly scheduled period, and the impact of the failure on overall 
aircraft performance is minimized. 

An example of a triple redundant computer configuration is shown 
in Fig. 3.2. As in the dual configuration, all inputs are available 
to all computers, and all control lines can be reached from any 
computer. Also, as in the dual arrangement, direct links exist 
among all processors. Unlike the basic dual system, two of the 
three processors operating in unison can deactivate or turn off the 
faulty third processor. 
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Because of the difficulty in providing for hardware synchroniza- 
tion of all three computers, this is not attempted. The synchroniza- 
tion which is necessary is provided via software convention by means 
of the direct links between computers. For example, without absolute 
synchronization, time skew on the reading of input lines could cause 
each processor to get a different value. These small differences in 
input make a direct comparison between the outputs of the processors 
difficult. In order to eliminate this problem without requiring tight 
synchronization, one processor will read the input lines and distribute 
the values to other processors, which will read an input line only 
to verify the reasonableness of the value delivered to them. After 
verifying the correctness of the inputs received from the partner com- 
puter, they will use it for all calculations. Thus, all computers will 
have identical inputs and should therefore produce identical outputs. A 
similar arrangement at the output provides for software voting on the 
output commands to the control lines, thereby eliminating hardware 
voting devices. Two of the three processors can lock the other pro- 
cessor out of the system at any time. 

This system provides the means of detecting at least the first fault 
and locating its source exactly. Operation may then fall back to a dual 

configuration except that now only fail-safe operation of the dual system 
is required. As noted in the section on dual systems, fault detection 
is reasonably sound. Since the' need for fault location after the 
detection is reduced, such a system functions adequately as a backup 
mode of operation. 
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Thus a triple system provides full fail -operational, fail- 
passive capabilities. Since two failures are now required to un- 
do the system, a significant increase in reliability is realized over 
a single computer system during the six-minute landing phase. In ad- 
dition, an even greater margin of safety is provided since the probabil- 
ity of undetected failures in the triple computer system is smaller than 
in the single or dual systems; that is, the three -computer system is more 
likely to fail passive after an incapacitating set of failures than 
the other systems . 

3,5 Conclusions 

The computer configuration recommended for the autopilot is a 
three-processor redundant system providing full fail -operational, fail- 
passive operation. The processors operate independently, with loose 
synchronization being provided by software conventions and by use of the 
inter-processor data links. Voting on redundant inputs and outputs is 
provided by means of the software. The concentration of error detection 
functions into software as opposed to hardware is more flexible and 
economical in this early stage of development, although greater reliance 
on hardware may be feasible with future computers designed for fault 
detection and isolation. It is expected that almost any of the modem 
flight computers could serve as the processor base of such a triple- 
processor system. 
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Chapter IV 


4.1 Introduction 

This chapter describes a digital flight control system (D.F.C.S.) 

* 

for cruise flight operation of the Boeing KC-135. A program structure 
of the flight control system has been developed and coded in FORTRAN. 
Two basic modes of operation are provided, manual and automatic. In 
the manual mode pitch and roll rates are commanded by deflecting the 
control stick* with pitch and roll attitude being held when the stick 
is returned to neutral . In automatic operation attitude or Mach 
number feedback loops are closed around the pitch attitude loop,, to 
provide attitude or Mach hold modes of operation, depending on the mis- 
sion requirement. For lateral control a heading feedback loop is 
closed around the roll angle loop to provide a heading hold system. 

The preliminary autopilot gains have been selected assuming the 
vehicle to be rigid. Root locus analysis was carried out in the s do- 
main, and the difference equations for the filters have been generated 
by obtaining the z transforms of the s domain compensation functions 
assuming a sampling frequency of 20 cycles/sec. This appears to be 
the most practical design approach for cases like this one in which 
autopilot bandwidth requirements are quite low, autopilot compensation 
is of low order, and the autopilot sampling rate is determined by the 
requirement that control surface motion be smooth. 
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4.2 Choice of Flight Condition 


A complete digital autopilot design would include a schedule of 
autopilot gains for all cruising flight conditions with the gains stored 
as a function of a set of variables such as true airspeed, air density 
and Mach number. For the C-135, which. was designed for ease of manual 
control, no unusual autopilot design problems are likely to be en- 
countered in cruising flight, and sufficient information about 'the 
requirements for a digital autopilot will be obtained by determining 
the autopilot gains for a single flight condition in the cruise range. 

The criterion employed in choosing this flight condition is described 
below. 

For design of the altitude hold mode the flight condition has 
been chosen such that the aircraft speed is on the front (high 
speed) side of the minimum thrust -required speed. This selection 
has been made because it is normal practice to operate the alti- 
tude hold mode in conjunction with an autothrottle control loop, 
which controls airspeed by varying engine power setting, when the air- 
craft is flown near or below the minimum thrust speed, while the goal 
in the present chapter is to design a satisfactory altitude hold mode 
which operates alone, - with no control of power setting being attempted. 

The performance of the altitude hold mode without an autothrottle near 
or below the minimum thrust required speed would be poor for the following 
reasons. First, at the minimum thrust required speed steady-state 
altitude cannot be controlled with the elevator since, at this speed, 
elevator deflection causes an initial altitude transient following 
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which the aircraft returns to its original altitude. Second, when 
the aircraft speed is below the minimum thrust required speed, a nose- 
down attitude must be commanded in order to obtain a steady rate of 
climb. This relationship between pitch angle and rate of climb 
results in an undershoot in response to a step altitude command 
and hence a poor altitude response containing either a long time 
delay or a large undershoot. 

Figures (4.1) and (4.2) show the thrust and power required 
characteristics for the aircraft at 40,000 ft and 35,000 ft 
respectively. On the basis of these data the equilibrium cruise 
flight condition for the aircraft was chosen to be 800 feet per second at 
35,000 feet. 

4.3 Aircraft Transfer Functions 

Tables (4.1) and (4.2) present the transfer functions for the 
aircraft longitudinal and lateral dynamics. These transfer functions 
are derived for the flight condition selected above from aerodynamic 
and other aircraft data presented in Ref. (1) using linearized equations 
of motion as presented in Ref. (2). 

4.4 Longitudinal Control System Configuration and Design Criteria 

A functional diagram of the basic longitudinal attitude control 
system for manual mode operation is shown in Fig. (4.3a), while Fig. 

(4.3b) shows an s domain transfer function model of the same system. 

The purpose of the absolute square nonlinearity is to provide higher 


IV-3 


„ “°* 8322 [o. 588 +1 ] [ 0.00697 +1 ] 

G A[6 e ,0] = 


-°- 66 [ll0 +1 ] [(oW) 2 +2 (0.04516) (osl^) *l] 

mv«] = 


U [A +1 ][094 +1 ] 

' A ^e * ' U 1 " °A 


where 



" 2 (°- 4135 )(o53 



[(o. 05365 ) * 2 (°- 0451 ) ( 0.05365 ) 



Table 4.1 Sununary of Aircraft Longitudinal Transfer Functions 


IV-4 



-24.621 


J A[6r,u z ] 


il.3357 ~ > ' 1 ] T( 0.427 ) ~ > ‘ 2 (~ 0 ‘ 112 )(o > 427)* 1 J 


[(l . 7841 ) +2 C°- 069446 ) 1.7841 +1 ]f 1.252 +1 ]io. 00443 + 1 ] 


J A[6r,g] 


-1.16 


[ 63.2899 +1 ][l.2394 +1 ][-0 .009332 +1 ! 


[(l.784l) +2(0 - 069446;) \l.784l) +1 . [( 1 . 252 ) +1 j[o. 00443 +1 J 


j a[6 J 

1 a,<fr J 


458 


■ 92 [(lT 7 §T 3 f * 2 C ° ' 0893) (02T3 j* 1 ] 


[(l .7841 ) C° • 069446 ) (1 7s41 )^l] 1.252 *’][ OoOTJ * l _ 




19 ' 263 [(-27y 2<2t -°- 5457) (2^99r 1 ]|'2 5 T25 ^1 


[( 1.784 ) * 2 (°- 069446 )( 1 .7 8 41 ) * 1 ] [ 1.252 +1 .f 0.00443 +1 J 


Table 4.2 Summary of Aircraft Lateral Transfer Functions 
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Figure 4.3b s Domain Transfer Function Block Diagram of Pitch Attitude 
Control System 
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stick sensitivity for large stick deflections. The dead zone is 
included to ensure that no stick bias signal is passed to the inte- 
grator when the stick is centered. 

The rate gyro sensitivity is selected to provide adequate 
damping of the short-period oscillation when the pitch attitude 
loop is closed. A root locus diagram of the short period-roots is 
shown in Fig. (4.4). The phugoid poles are not affected appreciably 
when the pitch rate feedback loop is closed and are not indicated in 
this diagram. Fig. (4.5) shows the locus of the short-period roots 
as a function of outer loop gain for two values of the inner 
loop gain. This diagram indicates that for a given outer loop gain 
greater damping of the short -period mode is obtained by using a 
higher gain for the pitch damping loop. Based on these trends ,and 
computer simulation runs, the inner loop gain selected corresponds to 
a value of rate gyro sensitivity of ^=200 degrees of 6 e /radian per sec. 
of 6. 

Referring to Fig. (4.5) and (4.6), the pitch gain is selected 
to make the low-frequency phugoid pole close up on the low-frequency 
zero while keeping the frequency and damping of the short-period mode ac- 
ceptable. The need for the closure requirement may be appreciated by ob- 
serving that the time constant of the low-frequency phugoid pole is of the 
order of 100 seconds. If there is appreciable separation between this pole 
and the neighboring zero, there results a significant residue for this 
pole and consequently a very slow convergence to steady state conditions 
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Figure 4.4 Locus of S.P.O. roots for pitch damping loop as a function of pitch damping gain. 


Flight Condition V=800 ft/sec, H=35,000 ft. 
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Figure 4.5 Locus of S.P.O. roots for pitch stabilization loop as a function of pitch 
attitude gain 



Note 
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iltzation loop as 




following a step command input. Another requirement calling for high 
pitch attitude loop gain is that of minimizing steady-state error. 

Based on. these considerations, the value of outer loop gain selected 
from the root locus and computer simulation runs corresponds to 
J^^SOO degrees of e a /radian of 0 g . The chart recording of Fig. 

(4.18) shows the response to a pulse stick input. A fast response 
with a slight overshot is indicated. 

In addition to the manual pitch attitude hold mode, the D.F.C.S. 
has two automatic longitudinal modes of operation. These are the 
altitude hold and Mach hold modes. As mentioned earlier, with 
the aircraft' flying on the "front" side of the power curve it 
is possible to provide acceptable altitude control by deflecting 
the elevator. The altitude hold control system configuration is 
shown in Fig. (4.7), where an altitude feedback loop is closed 
around the pitch attitude loop through an altitude gain. The re- 
ference altitude command is an input from the control console. The root 
locus for the short -period and phugoid roots for the altitude hold loop 
is shown in Figs, (4 8) and (4.9) with altitude gain as the 

parameter. The rate gyro sensitivity is 81.366 degrees of 6e/ 
rad per sec. of 0. From Figs. (4.8) and (4.9) the altitude gain 
is selected high enough to minimize steady-state error without dew 
stabilizing the phugoid poles. The value of selected is 
0.00011 rads, of 0 c /ft. of altitude error. Fig. 4.19 shows the response 
to a 200 ft. step change in altitude. Very little overshoot is 
apparent here . 
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Figure 4.8 Locus of S.P.O. root for altitude hold loop as a function of altitude gain 



Figure 4.9 Locus of phugoid root. for. altitude hold loop 
as a function of altitude gain k^. 
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The automatic mach hold control system configuration is the same as 
that shown in Fig. (4.7). The altitude feedback loop is replaced by a 
Mach number feedback loop, and the reference Mach number command is in- 
serted from the control console. In addition, the altitude gain 
is replaced by the Mach number gain K s =-3.5 rads, of 0 c /unit Mach no. 
error. The design considerations here are to minimize steady state error 
while retaining adequate damping of the short-period oscillation. 

Fig. (4.10) is the root locus for the Mach hold loop as a function of 
the Mach number gain with 1^=81.66 degrees of 6e/rad. per sec. of 0. 

Fig. (4.20) shows the response for a 0.01 step change in reference Mach 
number. As for the altitude hold case, there is practically no over- 
shoot . ' 

4.5, Lateral Control 

Manual and automatic modes for lateral control are provided. Fig. 
(4.11) shows the lateral control system configuration for manual opera- 
tion. The pilot commands a roll rate by deflecting the stick. When 
the stick is centered, the roll angle is held. In automatic operation, 
a heading loop is closed around the roll angle feedback loop as shown in 
Fig. (4.12). Here the command to the aileron is generated from the a 
heading error. In this mode the aircraft returns to wings- level flight 
when the heading error goes to zero. Completely automatic cruising 
flight is possible by engaging the altitude hold or Mach hold mode of the 
longitudinal control system and the heading hold mode of the lateral 
control system. 
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Figure 4.10 Locus of roots for Mach hold loop as a function of Mach number 
gain k^ 
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Figure 4.11 Functional diagram of manual lateral control mode of digital autopilot. 














Fig. (4.13) shows the s domain transfer function block diagram for 
the manual mode lateral control system. The function of the high-pass, 
wash-out filter in the yaw-rate-to-rudder feedback loop is to eliminate 
the constant yaw rate signal which would be present during a steady 
turn. The elimination of this signal reduces the gain required in the 
sideslip-to-rudder loop and thus simplifies the problem of obtaining 
an acceptable frequency and damping ratio in the closed-loop Dutch 
roll poles. Fig. (4.14) shows the root locus for the lateral oscilla- 
tion roots of the yaw-rate-to-rudder feedback loop as a function of yaw 
gain Kg. The locus is drawn for two values of the washout filter time 

constant. From this diagram it is seen that a long time constant is 
preferable from the point of view of increasing the damping of the 
lateral oscillation. However, too large a time constant leads to a very 
slow attenuation of the low-frequency yaw rate feedback. The larger value 
of x = 2.5 sec., was chosen for the time constant of the washout filter. 

Coordination of the aircraft during a turn is achieved by feeding 
back sideslip to the rudder. Fig. (4.15) shows the root locus for 
the sideslip feedback loop as a function of the sideslip gain Kg. 

While a high sensitivity is preferred, it is seen that this would lead 
to a high-frequency, lightly damped lateral oscillation. In practice 
[1], the sensitivity of the sideslip sensor must be kept low enough 
to minimize the effects of noise. 

In addition to the lateral oscillation damping and sideslip 
coordination loops, yaw rate is fed to the aileron. The effect of 
yaw rate feedback is similar to that of roll angle feedback. The 
function of this loop is to hold roll angle constant when a command 
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Figure 4.15 Root locus gain for sideslip, feedback loop as a function of sideslip gain 
k D for filter time constant = 2.5 sec. 


input from the stick is absent. Roll rate is also fed back to the 
aileron to provide roll damping. 


From the root locus diagrams of Fig. (4.14) and (4.15), the yaw 
rate gain is selected to be K 0 =1.15 rads, per sec. of e /rad. per sec. 

o Tg 

of to , and the sideslip gain Kg is taken to be Kg= 0.12 rad 

of eg /rad. of 3 . The gains and were determined from computer 
r 

simulation runs to give as fast a roll response as possible without 
an excessive overshoot. These values are K =0.4 and K, =0.35. 

Figure (4.21) shows the response of the manual mode to a pulse 
stick input. This response is rather sluggish and would probably not 
receive a good pilot rating. Since the roll subsidence mode of the air- 


craft has a time constant of 1.25 seconds, a faster roll response, with 
a time constant on the order of one second, could be obtained without 
introducing stability problems by removing the pure integration between 
the roll rate and yaw rate summation point and the aileron command and 
readjusting the roll and yaw rate gains. The large initial sideslip 
error is caused by the absence of any yawing moment to provide yaw 
acceleration when a turn is initiated. The sideslip transient could be 
nearly eliminated by providing a cross -feed in the digital autopilot from 
the lateral control stick input to the rudder deflection command. 

Figure (4.22) shows the response of the automatic heading mode to 
a ten degree step change in the commanded heading. This response is 
well damped with a slight roll angle overshoot. 


4.6 Method Employed to Construct Autopilot Difference Equations 

The analysis of the vehicle dynamics as well as the selection of the 
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autopilot gains and filters was carried out in the s domain. The 
preliminary analysis also assumed the vehicle to be rigid. Aeroelastic 
effects would introduce high-frequency lightly damped modes which 
could be destabilizing, particularly if the sampling frequency is not 
sufficiently high [3] . 

The highest frequencies of the vehicle dynamics occur in the short 
period and Dutch roll modes and are of the order of 5 radians per 
second. Using the general rule that the sampling frequency be about 
ten times the highest frequency of the plant, a sampling frequency of 
50 rads/sec (a sample period of T = 0.125 sec. or a sampling frequency 
of 8 cycles/sec.) is required for control of the rigid vehicle dynamics 
The sampling frequency employed in the digital autopilot is 20 
cycles /sec. This sampling rate was chosen because the C-135 digital 
autopilot equations are quite simple, consisting, in the majority of 
cases, of scaling and summing the inputs to produce the desired out- 
put quantities. Therefore, the most economical method of obtaining the 
varying outputs required to prevent jerkiness in the motion of the 
aircraft control surfaces is to sample the autopilot equations at a 
high cyclic rate. If the autopilot equations- were so complex that a 
single equation update cycle required more time than was available in 
the interval between outputs required for smoothness, provision would 
have to be made for generating outputs at several intermediate 

points within the basic equation update cycle. The s plane transfer 
\ 

functions to be generated in the digital autopilot were converted to 
z plane transfer functions employing the following transformation; 
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D(z) = (1- I)Z-(SM) 

D(z) denotes the z plane transfer function, G(s) the s plane transfer 
function, and the operator Z( ) represents the operation of replacing 
the poles and zeros of the s plane transfer function with poles and 
zeros in the z plane located at the exponential function of the sample 

time times the original pole or zero. That is, if 

K(s-a. ) . . . (s-a ) 

Ffsl = ± EL 

L J (s-b 1 )...(s-b n ) 

then 

a T a T 

K(z-e ).. . (z-e m ) 
b T b T 

Cz-e 1 ) . . . (z-e n ) 

where T denotes the sample time. 

To illustrate this procedure, the z domain equivalent of the s 
domain washout filter is derived. 
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calling RI(z) the filter input and RO(z) the filter output, then 

RO(z) _ z - 1 
RI ( Z ) = z-e‘ T/x 

The corresponding difference equation is 
RO(I) = e~ T/T RO(I-l)+RI(I)-RI(I-l) 

where the index I refers to the value of the variable at the current 
sampling instant. 

The simulation results presented earlier were all obtained employing 
autopilot equations derived as described above with a sampling rate 
of twenty times per second. 

4.7 Autopilot Structure 

Block diagrams of the longitudinal and lateral autopilots with 
digital compensations are shown in Figures (4.16) and (4.17). The 
mode select switches in these diagrams are represented in the D.F.C.S. 
program by the integer variables MODE and M0DE1. The autopilot mode 
is selected by setting these mode select switch variables according 
to Table 4.3. Table 4.4 presents a summary of the autopilot gains for 
the various modes . 

The D.F.C.S. computer program has been coded in FORTRAN. The pro- 
gram has been structured for use with the M.I.T. Draper Laboratory 
hybrid simulator (Aero-Sim) . In its present form D.F.C.S. consists of 
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gure 4.16 Block diagram of longitudinal digital control system 
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Table 4.4 Summary of Gains for Various D.F.C.S. Modes 
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the following four subroutines 


a. AUTOCARD: This subroutine is used to assign fixed D.F.C.S. 

data and to type declare and dimension the variables 

and arrays. In addition, all D.F.C.S. variables that are 
interfaced with the Aero-Sim executive routine are placed in 
common here. The D.F.C.S. mode select switches MODE and 
M0DE1 are called for by this routine and are typed in ac- 
cording to Table 4.3. While this subroutine is required to 
interface the D.F.C.S. with the Aero-Sim executive routine, 
it would not be included in an actual flight control implemen- 
tation . 

b. AUTOINIT: This subroutine is called by the Aero Sim 

executive routine fifty times a second during the trim cal- 
culation phase of the executive routine. The purpose of this 
routine is to set the autopilot command signals so that they 
correspond to trim values of control sufface deflections 

and throttle settings when the flight phase is entered. In an 
actual flight control implementation, such a routine would be 
included to initialize autopilot outputs and internal variables 
when the autopilot is switched to a new mode. 

c. AUTOTTY : This subroutine is called once prior to entering the 

flight phase. This subroutine is used to input the D.F.C.S.' 
gains for the mode selected by the mode switches, MODE and M0DE1. 
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d. AUTOPILO: This subroutine contains the autopilot equations. 

The relations between the inputs and outputs of the filters and 
integrators are written as difference equations of the type 
obtained in the previous section for the yaw rate washout 
filter. 
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Figure 4.18 Longitudinal C.S.S. Attitude Hold Response 
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Figure 4.19 Altitude hold response for 1000 ft step changes In reference attitude 
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Figure 4.21 Lateral C.S.S. Impulse Response 
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Chapter V 

AIRCRAFT FLIGHT SIMULATOR 


5.1 Introduction 

A flight simulator has been designed to serve as a test-bed for the 
digital autopilot. A hybrid computer facility, consisting of a Beckman, 
2200 Series, analog computer and a Xerox Data Systems, 9300 Series, 
digital computer, was used for the simulation. 

Aerodynamic data for the Boeing KC-135 airplane were used in setting 
up the simulator, but the scaling is such that any large subsonic 
transport- type aircraft (excluding VTOL's) can be simulated with vir- 
tually no modification of the basic analog patchboards. 

The computation is nonlinear; it covers the complete flight regime 
from stall speed to maximum permissible speed and from take-off to 
touch-down. The assumptions made in linearized computers are not made 
in this mechanization; no "small angle" or "small perturbation" as- 
sumptions are made, and longitudinal and lateral modes are coupled 
to the extent indicated by the aircraft data. 

The choice of analog versus digital computation is made such 
that the strong features of each are exploited. Thus, aircraft dynamics 
is handled primarily on the analog computer, and nonlinear function 
generation is done on the digital computer. 
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In the solution of the equations of motion the earth is assumed 
to be non- rotating and flat; also, the aircraft is assumed to have 
constant mass and constant mass distribution. 

The following sections indicate the equations used and the way 
that these equations have been implemented in the hybrid computer. 

5.2 Equations of Motion 

The six basic equations of aircraft motion can be divided into 
two groups of three each. The first three describe the translational 
motion of the aircraft center of mass; these are known as the "force 
equations". The other three describe the aircraft's rotational motion 
about its center of mass; these are the "moment equations". 

Each group of three equations can be represented by a single 
vector equation. In the vector equations below, a vector is indicated 
by underlining, and the standard dot (•) and cross (*) are used for 
the dot product and the cross product, respectively. The letter p 
preceding a vector signifies the time rate of change of that vector. 
The subscript appended to the p indicates the coordinate system 
relative to which the rate is taken; thus, p-X is the time rate of 

\J 

change of vector relative to coordinate system j. 

If wind effects are neglected, the vector equation for the 
translational motion of a constant-mass aircraft flying over a flat, 
non- rota ting earth is 

PjV = j- F + a - w-j xv (5.2-1) 
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£ is the true airspeed vector, i.e., the velocity of the aircraft 
relative to the ambient air mass. £ is the acceleration due to 
gravity. £ is the resultant non-gravitational force on the craft, m is 
the aircraft mass. Subscripts j and i refer to a moving and an 
inertial coordinate system, respectively, is the angular velocity 
of the moving system relative to the inertial system. 

The vector equation of rotational motion is 

PjMc " «c - x Uc (5 - 2 - 2) 

is the angular momentum of the aircraft with respect to its 
center of mass c- Me is the external moment applied about C. 

Note that the moving coordinate system denoted by subscript j in 
Eq. (5.2-2) need not be the same moving coordinate system as that of 
Eq. (5.2-1); thus, w-, in the second equation is, in general, not 
equal to u • . in the first equation. In the next section several moving 

• J 

coordinate systems are described, each with its individual subscript. 
5.3 Coordinate Frames 

Implementation of the vector equations of motion depends on the 
choice of the coordinate frame with respect to which each of the vector 
equations is resolved into component equations. Coordinate frames of 
interest are the following: 
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1. Navigation (symbol n) 3. Stability (symbol s) 

2. Body (symbol b) 4. Wind (symbol w) 

The origin of the navigation frame is at a point fixed relative to 
the earth. The origin of all the other frames is at the aircraft 
center of mass. All frames are orthogonal. 

In the navigation frame the positive x axis (i.e., the x n axis) 
points north, the y p axis points east, and the z p axis points down. 

For a non-rotating, flat earth the navigation frame may be regarded 
as an inertial frame. 

The body frame is fixed to the aircraft, which is assumed to be 
a rigid body. It is also assumed that the craft has a plane of symmetry. 
The x^ and z b axes lie in that plane, and the y b ' axis is perpendicular 
to the plane. The positive x b axis points forward and is parallel to 
the fuselage reference line. The positive y b axis points out along 
the right wing. The positive z b axis points in the downward direction 
In level flight. 

The stability frame is displaced from the body frame by the angle 
of attack a, an angle that is measured in the plane of symmetry. Thus, 
the x $ and z $ axes, like the x b and z b axes, lie in the plane of 
symmetry. Also, the y $ axis coincides with the y b axis. The x $ axis, 
positive forward, lies along the projection of the velocity vector 
in the plane of symmetry. The positive z $ axis points downward in 
level flight. 

The wind frame is displaced from the stability frame by the side- 
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slip angle 6. The z w and z $ axes coincide and are positive in the same 
direction. The x w axis is parallel to V_ and is positive in the direction 
that is positive. The y w axis is in the cross-wind direction; its 
positive direction is to the right. 

5.4 Coordinate Transformations 

The transformation of any of the vector quantities of Section 5.2 
from one coordinate frame to another is accomplished by means of a 
three-by- three transformation matrix. Since all the coordinate frames 
being considered are orthogonal, the transformation matrices are 
orthogonal . 

A superscript will be used to indicate the coordinate frame in 
which the components of a vector are expressed. If we know the com- 
ponents of a vector x in two coordinate frames, the i frame and the 
j frame, and if we designate the matrix that transforms a vector 
from the i frame to the j frame as C^ J , then we have the defining 
matrix equation 

x j = C.V (5.4-1) 

Conversely , 

x 1 ' = C.V (5.4-2) 

J 
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Since the matrices are orthogonal, 

C., 1 = (C. j ) _1 = (C 1 - J ) T (5.4-3) 

where superscript -1 denotes the matrix inverse and superscript T 
denotes the matrix transpose. 

We are concerned with the transformation matrices which relate 
the coordinate frames of Section 5.3. The body frame b is related 
to the navigation frame n by the three body axis Euler angles \ p, 0, <p . 
Three rotations are involved in going from the n frame to the b frame, 
first about the positive z p axis through the heading angle i|>, then 
about the rotated positive y axis through the pitch angle e, finally 
about the resulting positive x axis (which has undergone two rotations) 
through the roll angle <*>. 

The stability frame s is obtained from the b frame by rotation 
about the negative y fa axis through the angle of attack a. The wind 
frame w is obtained from the s frame by rotation about the positive 
axis through the sideslip angle p. 

The elements of the transformation matrices are shown below. 


1 

0 


0 



’cos 0 

0 

-sin e~ 


cos 

'P 

sin 

'P 

0 ‘ 

0 

cos 


sin 

<P 


0 

1 

0 


-sin 


cos 

<P 

0 

0 

-sin 

♦ 

cos 



sin 0 

0 

COS 0 

J 


0 


0 


1 
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cos e cos <p 


cos e sin ip 


-sin e 


-cos <(> sin ip 
+sin <t> sin e cos 


cos $ cos ip sin $ cos e 

+sin <t> sin e sin ip 


sin 4 > sin ip 
+cos <p sin e cos ip 


-sin 4 > cos ip cos <j> cos e 

+cos <j> sin e sin 4 ; 

(5.4-4) 


COS a 
0 

-sin a 


0 

1 

0 


Sin a 
0 

COS a 


(5.4-5) 



cos 3 
-sin 3 
0 


sin 3 
cos 3 
0 


0 

0 

1 


(5.4-6) 




cos 3 

COS a 

sin 

3 

cos 3 

sin a' 


r W p w 
L b _u s 

C s = 
L b 

-sin 3 

COS a 

cos 

3 

-sin 3 

sin a 

(5.4-7) 



-sin a 


0 


cos 

a 




c n 

C 12 

c 13 

i 




c n w= c h w 

n b 

C b = 
n 

C 21 

c 22 

c 23 




(5.4-8) 


J 

■ C 31 

c 32 

O 

OJ 

CO 

\ 
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c^-| = cos 0 cos a cos 0 cos $ - sin 0 cos <p si n tp 

+ sin 0 sin ^ sin 0 cos ip + cos 0 sin a sin <j> sin 4 / 

+ cos 0 sin a cos <p sin e cos 41 (5.4-8a) 

c-j 2 = cos B cos a cos 0 sin 4 > + sin 0 cos 4 > cos 4 > 

+ sin 0 sin <j> sin 9 sin - cos 0 sin a sin <j> cos 4 / 

+ cos 0 sin a cos $ sin e sin 4 ; J (5.4-8b) 

c 13 = -cos 0 cos a sine + sin 0 sin cos 0 

+ cos 0 sin a cos <f> cos 0 (5.4-8c) 

c^-j = -sin 0 cos a cos 0 cos 4 > - cos 0 cos 4 > sin i/' 

+ cos 0 sin <f> sin 0 cos 41 - sin 0 sin a sin 4 > sin ip 

- sin 0 sin a cos <p sin 0 cos 4 > (5.4-8d) 

c 22 ~ " S ^ n 9 cos a cos 9 sin 4 ^ + cos 0 cos 4 > cos 4 > 

+ cos R sin <p sin 0 sin 4 ; + sin 0 sin a sin <p cos ip 

- sin 0 sin a cos 4 sin 0 sin ip (5.4-8e) 

c 23 = S1n 9 C0S a S1n 9 + cos 9 S1 ' n ^ cos 9 

- sin 0 sin a cos 4 > cos 0 (5.4-8f) 
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(5.4-8g) 


c^-j = -sin a cos e cos tp + cos a sin <p sin ip 

+ cos a cos 4> sin e cos 4> 

c 32 = “ s ^ n a cos 0 s i n ^ ~ cos a sin 4> cos ij> 

+ cos a cos <p sin 0 sin ip (5.4-8h) 

c 33 = sin a S1n 0 + cos a cos cos 6 (5.4-8i) 


5.5 Angular Velocity Vectors 

The transformations of the last section can be used to obtain 
the components of the angular velocity vectors that are of interest. 
We start by designating the components of (the angular velocity 
of the b frame with respect to the n frame, with components expressed 
in the b frame) as P, Q, and R. In column matrix form. 



(5.5-1) 


The angular velocity of the s frame relative to the b frame is 


-bs 


•a 


- aj 


^>s 


(5.5-2) 


V-9 



/ 


The dot over the scalar function a denotes the time derivative of that 
scalar function. The angular velocity of the w frame with respect to 
the s frame is 


U) 

-SW 


w 


w 

-SW 


(5.5-3) 


By vector addition of angular velocities, we get 


w _ r w s , w 

<jJ Ki , - L u). + 0) , , 

-bw s ^s — sw 


-a sin 3 
-a COS 3 
S 


(5.5-4) 


s _ r s b , s 
—ns " C b + ^bs 


P cos a + R sin a 
Q - a 

-P sin a + R cos a 


(5.5-5) 


W _ r W b . W 

-nw b — nb — bw 


P cos 3 cos a + (Q - a) sin 3 + R cos 3 sin a 
-P sin 3 cos a + (Q - a) cos 3 - R sin 3 sin a 
-P sin a + R cos a + 3 


(5.5-6) 
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5.6 Component Equations of Translational Motion 

The three scalar equations represented by the force vector 
equation (5.2-1) are to be solved for the three fundamental aero- 
dynamic variables V, a, and 6. The form of the solution depends on 
the choice of a coordinate frame. In this section we shall examine 
the equations resulting from the selection of each of the three 
moving frames described in Section 5.3 and weigh their relative 
advantages and disadvantages. 

Because of the way in which the coordinate frames have been de- 
fined, the velocity vector has only one non-zero component in the 
wind frame, and the gravity vector has only one non-zero component 
in the navigation frame. 



'V 

0 


[0 


(5.6-1) 


n 


2 . 


0 

0 


9 


(5.6-2) 


Data on the non-gravitational force £ are usually presented with 
respect to stability axes, so that the vector is most simply re- 
presented as 


v-Vi 





(5.6-3) 


where X, Y, and Z are force components along the corresponding axes. 
The derivative p.V_ in Equation (5.2-1), if resolved in the j 

J 

coordinate system, is equal to p\/ J , the derivative of each of the 
components of V J . 

(PjV)j = pV j (5.6-4) 


Finally, since the navigation frame is an inertial frame, 
angular velocity may be replaced by co^.. 

In the j coordinate system Equation (5.2-1) becomes 

V j (5.6-5) 


pV j = 1 r J F S + C 

r — m q — 




a - 


. J X 

-nj 


This is the matrix form of the vector equation. If the components 

of 'w. J are to , u> , then [uj-^x] is the three-by-three anti- 
i n j a jri z n j 

symmetric matrix shown below. 






03 , 


- 0 ) 

L y 



(5.6-6) 
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In the body frame. 



"V cos 6 cos of 


u 

v b = c b v w = (c. w ) T v w = 

— W — D — 

V sin 3 

= 

V 

- 

V cos 8 sin a 


w 


(5.6-7) 


The last column is meant to indicate that the components of 
are frequently referred to as u, v, w in aerodynamic parlance. 
With b replacing j. Equation (5.6-5) becomes 


Pl b -i'c 


_ b F S + C V 
ms- n 



The derivative may be written as 


(5.6-8) 



u 


V cos 3 cos a - V 8 sin 8 cos a - V a cos 8 sin a 

pV b = 

V 

= 

V sin 8 + V 6 cos 8 


w 


V cos 8 sin a - V 8 sin 8 sin a + V a cos 8 cos a 


(5.6-9) 

The cross-product is 




~-Rv + Qw 


-R sin 8 + Q cos 8 sin a 

= 

Ru - Pw 

= V 

(R cos a - P sin a) cos 8 


-Qu + Pv 


_-Q cos 8 cos a + P sin 8 


(5.6-10) 


In terms of u, v, w, the component equations are 
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u = jjj- (X s cos a - Z s sin a) - g sin e + Rv - Qw 

• 1 s 

v = — Y + g sin d> cos e - Ru + Pw 

m j y 

* 1 s s 

w = — (X sin a + Z cos a) + g cos $ cos e + Qu - Pv 


(5.6-11) 


(5.6-12) 

(5.6-13) 


The equations are integrated to obtain, u, v, w. The desired 
variables V, a, 8 are derived from u, v, w as follows: 


V = + (u 2 + v 2 + w 2 ) 1/2 (5.6-14) 

a = tan" 1 (jj) (5.6-15) 


g = tan' 


U(u 2 ♦ w 2 ) 1 ' 2 


(5.6-16) 


The inverse tangents in the last two equations do not cause ambi- 
guities because the magnitude of both a and g is assumed to be less 
than j radians. 

The square root and inverse tangent computations pose some dif- 
ficulties for the analog computer, and it is this computer that we 
should like to use for integration of the force equations because of 
its wide dynamic range. The difficulties are not insurmountable; i.e., 
the computations can be performed, but there is likely to be some 
static inaccuracy. An alternative formulation of the body-axis 
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equations permits us to integrate directly to get V, a, 3. without 
any square root or inverse tangent determination. This formulation 
is given below. 


V = 


1 


COS 3 COS a 


(X s cos a - Z s sin a) - g sin e 


+ V 


( c o s ~ a R + &) tan 6 ■ (Q - a) tan a 


(5.6-17) 


3 = 


\TcSTb ( i yS + 9 s,n 


4 > cos 8 - V sin 3 ) 


- R COS a + P sin a 


(5.6-18) 


1 


V COS 3 COS a 


^ (X s sin a + Z s cos a) + g cos $ cos e 


1 • 1 

j V tan a - - P tan 3 + 3 tan 3 tan a + Q 


(5.6-19.) 


Although the integrations are direct, there is a significant 
increase in the number of multiplications, another source of in- 
accuracy (particularly when the desired product is zero, or near 
zero, as it normally is for many of the terms on the right-hand 
sides of the equations). 

In the stability frame we have 


pV s = 1 f s + C s q n 

K — m — n i 


n 



V s 


(5.6-20) 
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(5.6-21) 


V 

V 



rv s ' 

X 


V cos B - V B sin b' 

pV S = 

V s 

y 


V sin B + V B cos 6 


Lo . 


0 




SwW 


Wj„W „ 



V 

cos 

CQ 


II 

V 

sin 

8 

II 



0 

J 



(5.6-22) 




(P sin a - R cos a) V y s 

(-P sin a + R cos a) V s 

-(Q - a) V s + (p COS a + R sin a) V s 
x y 


f. s n _ s b 
c n a ■ c b a 


V 


"(P sin a - R cos a) sin g 
(-P sin a + R cos ct) cos B 
-(Q - a) cos B + (P cos a + R sin a) sin 3 


g 


-cos a sin 0 + sin a 
sin <t> cos e 
sin a sin e + cos a 


cos <f> cos 0 


cos 0 cos 0 


(5.6-23) 

(5.6-24) 


The first two component equations may be integrated to get the 

velocity components V s and V s , and from these we get V and B in a 

* y 

matter analogous to that used for the body-axis system. The equations 
are 
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* r IS 

V x * — X + g (-cos a sin 0 + sin a cos $ cos 0 ) 


+ (-P sin a + R COS a) V 


(5.6-25) 


Vy S = jjj- V s + g sin <t> cos 6 - (-P sin a + R cos a)V x s (5.6-26) 


V * + 


(V X S ) 2 + (V y s ) 2 


1/2 


6 = tan 


V s ' 

V x S J 


(5.6-27) 


(5.6-28) 


Again there is the disadvantage associated with analog compu- 
tation of the square root and the inverse tangent. The formulation 
involving direct integration of V, 8, a is the following: 


V = 


1 


COS 8 


1 s 

— X + g (-cos a sin 0 + sin a cos 4> cos 


•>] 


+ V (-P sin a + R cos a + 6) tan B 


(5.6-29) 


1 d V s + 9 sin 


V cos 8 v m 


cos e - V sin b) + P sin a - R cos a 

(5.6-30) 


a = 


1 

V cos 8" 


1 Z s + g (sin a sin e + cos a cos </> cos e) 


+ Q - (P cos a + R sin a) tan 3 


(5.6-31) 
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The vector equation in the wind frame is 



1 c W F S t C V 
ms— n 


- [u> W X] V 
L ^r)W j 


w 


where 



‘V 

0 

0 


c s V = 


r X s cos 0 + Y s sin e' 
-X s sin 0 + Y s cos 6 


(5.6-32) 


(5.6-33) 


(5.6-34) 



C 13 

c 23 

- C 33 


(5.6-35) 


0 


r W n >/ w w 

fenw *11 ‘V 


-P sin a + R COS a + 3 

(P cos a + R sin a) sin 3 - (Q - a) cos 8 


(5.6-36) 


The component equations, solved for V, 3, a, are 

V 3 jjj- (X s cos 3 + Y s sin 3 ) + g (-cos 3 cos a sin 6 
+ sin s sin $ cos e + cos s sin a cos <j> cos e) (5.6-37) 
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e = 1 


1 ^ c 

jjj- (-X sin g + Y cos b) + g (sin b cos a sin e 


■>] 


+ cos b sin <j> cos 8 - sin 6 sin a cos <j> cos e, 

j 

+ P sin a - R cos a (5.6-38) 


a = 


1 


jjj- Z s + g (sin a sin e + cos a cos $ cos 6 


V cos 6 

(P cos a + R sin a) tan B + Q 


>] 


(5.6-39) 


In comparing the formulations in the three coordinate frames, we 

shall confine the discussion to the equations that are solved for 

V, B, and a directly. We note that, since the and y $ axes coincide, 
• • 
the B equation in the s frame is the same as the 3 equation in the b 

frame. Also, since the z $ and z w axes coincide, the a equation is 
the same in the s and w frames. 

As we go from the b frame to the s frame to the w frame, the 
components of the gravity vector become more complex, and the com- 
ponents of (w x VJ become simpler. The computational complexity 
caused by the gravity components can be reduced if aircraft attitude 
is determined by integration of the direction cosines; this subject 
is discussed in detail in a later section. 

The (w x Vj components become simpler because V_ has only one 
non-zero component in the w frame. This fact more than compensates 
for the increased complexity of u in the w frame. 
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The apparent simplicity of the components of £ in the s frame 
may be illusory; it depends on the assumption that aerodynamic and 
thrust data are normally presented in terms of stability-axis com- 
ponents. However, the data can be pre-processed to effect a trans- 
formation into any desired moving frame. 

Finally, we note that there are V terms on the right-hand sides 
• • 

of the e and a equations in the b and s frames, but no V terms on the 
right-hand sides of the w-frame equations. 

The wind frame formulation has been selected for implementation 
in the simulator, the primary consideration being the reduced number 
of (w x V) terms. 


5.7 Component Equations of Rotational Motion 

In order to resolve the rotational vector equation, (5.2-2), into 
scalar component equations, we shall derive an expression for angular 
momentum as a function of angular velocity. It will become clear 
that the body frame has decided advantages over the other moving 
frames in the rotational equations. 

The aircraft is assumed to be rigid, with constant mass and 
constant mass distribution. It may be regarded as a system of n 


particles, with the k-th particle having mass m^ and being located 


at position r^ k 


relative to center of mass C. From the definition 


of angular momentum and the Coriolis theorem. 
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Ac ■ x m k ("lAtt* * x m k (p dA;k + &ij * kk> (5 - 7 ' 1! 

where £ represents the sunsnation with respect to k from k = 1 to 
k = n. 

The term Pjl^ is the velocity of the k-th particle with respect 
to the center of mass. This velocity is zero in the body frame, but 
non-zero in the other two moving frames. Hence a significant simpli- 
fication of the equations is effected by using the body frame. In 
the body frame, 

y<: b = ^k b x m k Kb b x ^Ck^ = ^"V-Ck 6 x ^ck** x ^b^ ^ 5 - 7 ” 2 ^ 

In matrix notation, a triple vector product of the form ax (a. x b) 
may be expanded as follows: 


La x][_a x]b = (a a T - iL I) k 


(5.7-3) 


where «a a_ is a dyad and I is the three-by-three identity matrix. 
With this expansion the angular momentum becomes 


k = ^"k ^k 1 ' ^ck*^ 


^nb 


(5.7-4) 


b ... 


The summation operating on angular velocity vector is 
the inertia matrix, which we shall denote by K^. If the components 
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are x k , y k> z^, the inertia matrix is given by 


of ^Ck 


K» = 


H (y k 
-KVk 
L-H z k x k 


+ 2 k> 


-KVk -HVk 
J>k< 2 k 2 * x k 2) -IVk z k 
>k Vk I m k (x k 2 + ^k 2) . 


^XX 

_I xy 

“ J xz 

_J xy 

T yy 

1 

<< H 

N 

N 

X 

N 

i 

1 

<< H 

N 

J zz 


(5.7-5) 


J xx’ J yy’ and J zz are the moments of inertia in the body frame, and 

I , I , and i are the products of inertia in that frame. Because 
xy xz yz 

the x^z^ plane is assumed to be a plane of symmetry, J xy and l yz 
are identically zero, and I is a principal moment of inertia. 

It is possible to achieve a further simplification of the 
inertia matrix by establishing a new body-fixed frame in which all 
three coordinate axes are principal axes and all three products of 
inertia are zero. Then becomes a diagonal matrix. The new x and 
z axes would be rotated by an angle e from the x^ and z^ axes of 
the conventional body frame. This rotation was not used in the layout 
of the flight simulator because it was felt that the design im- 
provement obtained was not sufficient to offset the labor (and 
probable confusion) that would be involved in re-processing some 
of the aerodynamic data. 
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We return now to the vector equation of rotational motion. In 
the conventional body frame it becomes 


and 


PHc' = Me' - ^ x H* 


u b _ b 

k- ~ K ^nb 


(5.7-6) 


(5.7-7) 


Since K b is a constant matrix. 


PHc b * P 0< b ^ b b ) - K b P Snb ‘’ 


XX 

0 

L ~ J xz 


0 

T yy 

o 


xz 


zz 


' 

' p ■ 


Q 


R 


(5.7-8) 


The cross-product is 


^nb b x 


^b x 


|yb b 
K ^b 


0 -R ... Q 

R 0 -P 

-Q P 0 


xx 

0 


-J„ 


J c xz 


0 


J, 


yy 

o 


-i 

0 

1 


xz 


zz 



1 

Q- 


Q 


_ R _ 


(5.7-9) 
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The components of are designated as L, the rolling moment; M, 
the pitching moment; and N, the yawing moment. 

(5.7-10) 


The component equations are then 

P = ~~ [L + I (R + PQ) + (I - I )QR ] 

"xx yy 

6 = ^ [M + (r2 " p2) + {J ^ ' - r xx ,RP] 

R = [N + J xz (P - QR) + (J xx - T yy )PQ ] 

These equations are integrated to obtain the angular velocity 
components P, Q, R. 

5.8 Attitude Determination 

The attitude of an aircraft is defined in terms of its body-axis 
Euler angles ip , e, <j>. We should like to determine these three angles 
by expressing their rates rp, e, <p, in terms of body rates P, Q, R, 

and then integrating. A difficulty arises because the axes about 

• • • • 
which \p, e, <p are measured are not mutually orthogonal, ip is 


(5.7-11) 

(5.7-12) 

(5.7-13) 




L 

M 

N 
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measured about the z p axis, <j> about the x^ axis, and e about an axis 
that is obtained by rotating the y n axis through the angle tp or by 
rotating the y^ axis through the angle - <j>. The e axis is perpendicular 
to both the ^ and <j> axes, but the ^ and <j> axes are, in general, not 
perpendicular to each other. In matrix form. 


■p 


'1 

0 



-sin 

0 

* 


V 

Q 

= 

0 

cos 

<t> 

cos 

e 

sin 

* 


0 

R 


0 

-sin 

<P 

cos 

0 

cos 

+. 




(5.8-1) 


If the matrix is not singular, it can be inverted to yield the 
desired relationships for the Euler angle rates in terms of the 
body rates. 


V 

. 

'i 

sin (j> 

tan 

0 

COS <f> 

tan 

6 " 

0 

= 

0 

cos 



-sin 

$ 


.A. 


0 

sin 4> 

sec 

0 

cos <p 

sec 

0 


P 

Q 

R 


(5.8-2) ‘ 


The matrix of Equation (5.8-1) becomes singular when 6 = ± j . 

When the singularity occurs, Equation (5.8-2) cannot be solved for 
• • • ___ • 

<f> or t|», although a relation for (<j> + ip) can be obtained from the 
first scalar equation of (5.8-1). 

To avoid the problems associated with the singularity, we can 
employ either of two schemes which involve redundant integrations. 
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The first is the method of quaternions. It is a four-parameter 
method;, there are four integrations and one constraint equation. 

The second alternative is the method of direction cosines, which 
in principle requires nine integrations and hence has six constraint 
equations. 

The method of direction cosines has been chosen for attitude 
determination in our flight simulator. Although the quaternion 
method has the advantage of fewer integrations, its parameters 
are not so familiar as the direction cosines. Moreover, as we shall 
show, the integration of all nine cosines is not required to obtain 
all the cosines; some can be obtained directly from the constraint 
equations after the others have been obtained by integration. 

A brief derivation of the mathematical formulation of the 
direction cosine method will now be given. Consider an arbitrary 
vector and its resolution into components in two coordinate 
systems, the inertial, or stationary, system i and the moving system 
j. The two coordinate systems are related by the transformation 
matrix C^ J . 

u J = C. j u 1 (5.8-3) 

The Coriolis equation states that 

Pj’u. = Pj u_ + oj/j xu (5.8-4) 
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In the j coordinate system this equation becomes 

C f J (pu 1 ) = p u_ J + x J (5.8-5) 

We substitute (5.8-3) into (5.8-5) and expand the derivative on the 
right-hand side. 

(pu 1 ) = p(C i j u 1 ) + x u 1 

= (pC. j ) u 1 + C.^pu 1 ) + w.j 0 x C. j u 1 

Then 

(pc i j ) u 1 = - co.jj x C. j u 1 

The right-hand side of this. equation may be regarded as the matrix 
represented by (- u. . J x C. J ) operating on the vector u 1 . Similarly, 

* J ' 

the left-hand side represents matrix (pC.j J ) operating on u 1 . Since 
u 1 is any arbitrary vector, the two matrix operators must be equal. 

pC. J = - . J x C. j (5.8-8) 

This is the matrix equation to be integrated to get the elements of 



(5.8-6) 

(5.8-7) 
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Usually Equation (5.8-8) is solved for the elements of , the 
matrix transformation from navigation to body axes. Then Equation 
(5.4-8) can be used to get C n w , the matrix required for the gravity 
components along wind axes. Also, angles ip, d, 4> can be obtained 
for display or recording purposes from C^. 

In our flight simulator we depart from the usual procedure by 
solving Equation (5.8-8) for C n w rather than C n b . This approach 
gives us the gravity components along wind axes directly. The matrix 
equation to be solved is 


PC 


w 


W v r w 

to XL 

-nw n 


(5.8-9) 


The components of w w , given by Equation (5.5-6), will be designated 
P', Q 1 , R'. The expanded form of (5.8-9) is 



C 11 

c 12 

c 13i 


' 0 R' 

-Q' 

j 

C 11 

c 12 

C 1 3 

1 

C 21 

c 22 

c 23 


-R' 0 

p' 


C 21 

c 22 

c 23 

1 

. C 31 

c 32 

C 33- 

J 

Q' -P' 

0 _ 


- C 31 

c 32 

c 33 • 

R ' c 21 

- Q'c 31 


R'c 22 - 

Q ' c 32 


R' c 2 3 

Q ' c 33 

r R ’ c n 

+ P ' C 31 


- 

Rc l 2 + 

P' c 32 


- r ' c 13 + 

P ' C 33 

L^H 

- P'c 21 



q ' c 12 - 

P' c 22 


q ' c 13 - 

P ' c 23 


(5.8-10) 
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It may be noted that the elements of each column of C w are 

n 

computed independently of the elements of the other two columns. 

For example, the derivatives of the elements in the third column 
depend only on the elements of the third column and the angular 
velocity. This leads to the interesting conclusion that, if we are 
concerned only about aircraft dynamics and not about display of the 
Euler angles or determination of position, we need integrate only 
three of the direction cosine elements, those in the third column, 
because only those are needed to obtain the wind-axis force equations. 
(Of course, we should still need a constraint equation to ensure 
that the magnitude of the vector represented by the three elements 
in the third column is unity.) 

If we solve for all nine direction cosines by integration, we 
have six constraint equations, all of which utilize properties of 
the three-by-three orthogonal transformation matrix. Let Cj , c 3 

be vectors representing the elements in the columns of C n w . 

Cp = [ C_-j £2 Cg 3 (5.8-11) 

Then an independent set of six scalar constraint equations is given 

by 

c 3 • c 3 = 1 (5.8-12) 
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(5.8-13) 



(5.8-14) 



(5.8-15) 


The cross-product equation represents three scalar equations. 

In the implementation of the direction cosine method in the 
flight simulator, we adapt a procedure suggested by A.C. Robinson^. 
Only six integrations are performed. We integrate the elements of the 
third column, then integrate the elements of the second column, and 
solve for the elements of the first column algebraically. Equations 
(5.8-12), (5.8-13), and (5.8-14) are used as constraints, and 
Equation (5.8-15) is used to obtain Cj . Specifically, the procedure 
is as follows: 

1. Integrate c 3 to get the approximate components of c^, 
approximate because of errors inherent in integration. A tilde (%) 
above an element or a vector indicates an approximation to the true 
value of that element or vector. 


c ]3 = /( R'c 23 - Q'c 33 )dt (5.8-16) 

c 23 = / ( -R ' c-j 3 + P'c 33 )dt (5.8-17) 
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c 33 " / ' c i 3 " P'c 2 3 )dt 


(5.8-18) 


2. Correct the elements by normalizing c^. We obtain the corrected 
elements by dividing the approximate elements by the magnitude of the 
approximate vector. 

£3 ‘ -3 = c i 3 2 + c 23 2 + c 33 2 = 1 + e (5.8-19) 


where e is a small quantity. Let a caret (-) above an element indicate 
the corrected value ( of that element. 


13 


'13 


/% 'v \T72 

<5.3 • 5-3) 


M3 

(1 + e) 


1/2 


To first order in e, 


% /, 1 \ 1 / _ 'v# y \ ^ 

c 13 = c 13 ^ ‘ 2 " 2 (3 ~ £3 -3^ c 


13 


(5.8-20) 


(5.8-21) 


Similarly, 

c 23 = 2 ^ ” -3 — 3^ c 23 (5.8-22) 

c 33 ~ 2 ^ ~ -3 ' —3^ c 33 (5.8-23) 
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3. Integrate £2 to get the approximate components of 

c-j 2 = / (R* c 22 - Q' c 32 )dt (5.8-24) 

^ 22 = J(-R'c 12 + P'c 32 )dt (5.8-25) 

C32 = / (Q 1 c-j 2 - P'c 22 )dt (5.8-26) 

4. Correct the approximate elements of £2 by orthogonal i zing 
with respect to £3 and normalizing. Orthogonal izati on is accomplished 

^ A 

by retaining only that portion of c^, that is perpendicular to £ 3 . 

- A A A 

The part of o, parallel to £3 is given by (£ 2 • £ 3 )£ 3 ; this part is 
to be eliminated. Normalization is accomplished as in Step 2. 

c , 2 • J (3 - Cj • l 2 ) Ll u - • £ 3 ) ^ 3 ] (5.8-27) 

'22 M 7 < 3 - h ' ^22 ‘ ^—2 ' £3) <= 23 ] (5.8-28) 

c 32 = J (3 - Cj • 1 2 ) [c 32 - (£3 • C3) C33] (5.8-29) 

5- £] is determined from Equation (5.8-15). 

A A A A A 

C 11 = c 22 c 33 " c 23 c 32 (5.8-30) 
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(5.8-31) 


c 2 1 ‘ c 32 C 1 3 ’ C 1 2 C 33 

C 31 = c 12 c 23 " c 13 c 22 (5.8-32) 

Implementation of these equations has been carried out on the 
digital computer at a sample rate of fifty per second. 


5.9 Position Determination 

Position is determined by integrating the components of velocity 
in the navigation frame. 


V" = C " V w = (O ' V’ 

W — 1 FI 


w lT v/W = 


'11 
'1 2 1 


(5.9-1) 


'1 3J 


The first two integrals give distance traveled north and east of a 
specified starting point. The third equation gives z 11 , which is the 
negative of the rate of climb h; the integral of the third equation 
gives decrease in altitude. 

If the angle of inclination of the velocity vector to the 
horizontal is designated y (positive when the airplane is climbing), 
then 


sm y = T7 = - 


z n 


C 13 V 


= -c 


13 


(5.9-2) 
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5.10 Computation of Non-Gravi tational Forces and Moments 


The non-gravi tational forces are computed in terms of non- 
dimensional coefficients. The coefficients are the lift coefficient 
C L> the drag coefficient C^, and the side-force coefficient C y ; they 
are related to the components of £ s in Equation (5.6-3) as follows: 



X s 


- c d' 

F S = 

Y S 

= 

c„ 

— “ 



y 


Z S 


l- C L 


qS 


where 


q 



p 


V 


2 


(5.10-1) 


(5.10-2) 


q is the dynamic pressure, S is the wing area of the aircraft, and 
p is the air density. 

In a corresponding manner the components of the external moment 
are computed in terms of non-dimensional coefficients. The 
coefficients are the rolling moment coefficient C £ , the pitching 
moment coefficient C , and the yawing moment coefficient C n - 



C* b 

C m c 

C b 
■ n 


qS 


(5.10-3) 


b and c are the span and the mean aerodynamic chord, respectively, 
of the aircraft wing. 
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The data for the coefficients are assumed to include the direct 
effects of thrust as well as all aerodynamic effects. The data are 
normally obtained from wind tunnel testing of powered models. 

The computation of the coefficients for the aircraft simulator 
is nonlinear. The computation of serves to illustrate the pro- 
cedure that is used. First the available C L information is pre- 
processed by running it through a multi-variable digital regression 
program which determines, on a least-squares basis, the coefficients 
of a series expression for C, as a function of angle of 

attack a, Mach number M, flap deflection i^, thrust T, stabilizer 
setting s, elevator deflection 6 e> sideslip e, and any other static 
variables for which data are available. 


'I C. ( a, M, T, S, 5 , &,»••) 

Static 


(5.10-4) 


Based on the equation for C. , series expressions are de- 

Static 9 C l 9C^ 

termined analytically for the partial derivatives and 

e 

Also, the regression program is used to obtain series for the 


dynamic derivatives 


9 Ci 


9C. 


variables. 

The equations for 


and 


( aC 


2V 


as functions of all relevant 


and the four partial derivatives are 

'stati c 

stored in the digital simulator program. In a simulated flight, 
values of these quantities are computed digitally at some designated 
rate (five times per second in the present simulation) as functions 
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of the up-dated independent variables. Information transmitted from 

the digital computer to the analog computer includes the four partial 

derivatives and Ci , which is defined as follows: 

L o 




static 




(5.10-5) 


Ci includes the effect on C. of such variables as flap deflection 
and stabilizer setting. It is the total that would exist if a, 

6 g , Q, and a were all zero and if all the partial derivatives were 
"frozen" at their instantaneous values. 

The actual digital-to-analog (D-A) signals, properly scaled, 
are the following: 


( 1 ) 



( 2 ) 


pVS . 

2m 3 6 a 

e 


(3) 

(4) 

(5) 


pS 

c 

3C l 

2m 
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3C l 
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In the analog computer the first signal is multiplied by a, the second 
by <$ , the third by Q, and the fourth by a. The four products are 
added to the fifth signal to produce a voltage that is proportional to 
£|| C L . Here C L is the total C L , including both static and dynamic 
effects. From Equations (5.10-1) and (5.10-2), 



zl 

mV 


(5.10-6) 


This quantity is one of those used in the determination of a. 

(See Equation (5.6-39).) 

The process of computing C L digitally, separating it into 
several component parts, then re-assembling the parts in the analog 
computer, will appear, at first reading, to be unnecessarily cir- 
cuitous. The procedure is used to get improved dynamic response in a 
nonlinear simulation. This subject is discussed in more detail in 
Section 5.11. 

The other five non-dimensional coefficients are computed in 
similar fashion. The equations appear in the summary of Section 5.13. 


5.11 Allocation of Computation between Analog and Digital Computers 
The hybrid computer facility used for flight simulation consists 
of a Xerox Data Systems 9300 digital computer and two Beckman 2200 
analog computers. The two types of computer complement each other, 
the digital being used primarily for nonlinear function generation 
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and the analog primarily to obtain real-time dynamic performance. 

The factors that were considered in determining how a specific 
computation should be performed are given below. 

1. The digital computer has neither the speed (14 psec. for floating 
point add, 12 psec. for floating point multiply) nor the memory capacity 
(32,000 words) to perform all of the required real-time computation at 

an acceptably high sample rate (in the range of 20 to 100 samples per 
second). 

2. To avoid excessive set-up time and special handling, the 
generation of arbitrary nonlinear functions is not performed on the 
analog computer. 

3. The analog computer is preferred for the integration of the 
equations relating to aircraft dynamics. 

4. Analog multiplication of two variables is permissible but is 
to be used sparingly because it is relatively inaccurate, especially 
when the product is at or close to zero, and because the number of 
analog multipliers available is limited. 

5. The number of analog-to-digital (A-D) and digital-to-analog 
(D-A) lines is limited. 

6. The sine and cosine of a variable can be generated on the 
analog computer, but the number of sine-cosine function generators 
is limited. 

With these considerations in mind, it was decided to make one 
of the analog computer consoles a "standard" computer and the other 


V- 38 



a "variable" computer. The standard console is designed such that 
no changes in the analog patching should be required in going from 
the simulation of one aircraft type of a given class to another air- 
craft type in the same class. To achieve this design objective, 
great care must be exercised in scaling, and a certain amount of 
redundancy must be provided to account for effects that may exist 
in one aircraft type and not another. 

The integration of the force equations and the moment equations 
is done in the standard analog console. The class of aircraft for 
which the present patchboard is designed is the large subsonic 
transport. The original design was for the KC-135 airplane, but it 
has also been used recently for a simulation of the atmospheric 
cruise phase of the flight of the space shuttle vehicle. 

The second analog console, the variable one, is used for 
simulation of the aircraft control systems and displays and any 
special effects that are desired. 

The patching of the standard console can remain fixed despite 
the fact that the aerodynamic coefficients change from one aircraft 
type to another, because the coefficients are computed digitally and 
the scaling in the digital computer can be adjusted to maintain a 
fixed schedule of scale factors in the analog computer. 

We shall use the C L example of the last section to illustrate 
the procedure. The five signals mentioned in that section are 
available in the standard console on D-A lines. In addition, a. 
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a, and Q signals are generated in the standard console, and a 
signal representing is brought over to the standard console from 
the variable console. The computation that is then performed in the 
standard console is 



c, + !i, 

aC. 

•V X 

aC. 

Qc ’ C L 

aC 

L 0 3 “ 

ss e 

6e + 

2V , 

ctC 

2 V 

‘ ' 2V 


= fiVs c . _ zl 
2m l L mV 


(5.11-1) 


The digital signals remain fixed during a sample period (one fifth of 
a second), but the analog signals a, a, Q, and 6 g vary continuously; 
hence the computed C L is varying continuously. 

In effect, the hybrid computing facility is solving, during each 
sample period, a quasi-linear problem with fixed initial conditions 
and constant values of the derivatives. At the end of the sample 
period the initial conditions and the derivatives are up-dated, and 
the solution of a new quasi-linear problem is begun. Implicit in this 
method of computation is the assumption that the digital inputs 
(initial conditions and derivatives) change only slightly during 
a sample period, so that there will be no significant jumps in the 
dependent variables, such as C L , when the up-dated digital values 
are introduced. 

It is felt that this method of computation combines the advantages 
of flexibility in the nonlinear function generation and good real-time 
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dynamic performance. The dynamic performance is effectively independent 
of the digital sample rate. 

Inasmuch as the integration of angular velocity to determine 
attitude also requires good dynamic response, it would be desirable 
to perform this computation on the analog computer. However, the 
number of analog multipliers that would be required for the imple- 
mentation of the direction cosine formulation is formidable. 
Consequently, it was decided to use digital computation at a 
relatively high sample rate. A sample rate of fifty per second was 
chosen. This rate is at least an order of magnitude greater than any 
of the aircraft rates being simulated. The digital solution requires 
three to four milliseconds in each twenty-millisecond sample period. 

Trapezoidal integration is used to solve for the elements of 
matrix C n w . To illustrate the method, consider the integration of 
c -|3 to obtain c-^. From Equation (5.8-10), 

C 1 3 = R c 23 ~ ^ ' c 33 (5.11-2) 

At the start of a sample period, we have the "old" values of c 13 , 
c 23’ c 33 anc * C 1 3 » anc * ^ rom the ana ^°9 computer we get up-dated ("new") 
values of Q' and R' . With subscripts o and n representing old and new, 
respectively, we have 

C 1 3 = R ' n c 23 ' Q 'n c 33 
n o o 
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(5.11-3) 



( 5 . 11 - 4 ) 


c 





) 

n 


At + 



Since the time interval At is 0.02 second, 


% 

c 



0.01 





( 5 . 11 - 5 ) 


As in Section 5.8, the tilde denotes the approximate value, and the 
caret denotes the corrected value. 

After all the direction cosines have been computed, the elements 
in the third column of the matrix are multiplied by g to get the 
gravity components needed for solution of the force equations. The 
elements in the first row of the matrix are multiplied by V and then 
integrated to obtain geographical position and altitude. 


5.12 Signals for Recording and Display 

Listed below are the signals that are made available for recording 
and/or display. The source of each signal is indicated. 

1. V, e, and a are obtained from integration of the force 
equations in the standard analog console. 

2. P, Q, and R are obtained from integration of the moment 
equations in the standard analog console. 

3. <j>, e, and <p are obtained from the direction cosines generated 
in the digital computer. 
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4. Control deflections are obtained from the variable analog 
console. 

5. Simulated accelerometer readings, under the assumption that 
the body-mounted accelerometer package is located at the aircraft 
center of mass, are obtained from the digital computer. 

6. Rate of climb, altitude, and geographical position are obtained 
from the digital computer. 

The determination of Euler angles <t> , e, ip from direction cosines 
requires explanation. The direction cosine matrix obtained by inte- 
gration is C n w , but the direction cosine matrix needed to determine 
the angles is C n b . To get C n b from C n w , we pre-multiply Equation 
(5.4-8) by (C b w ) T . 

C = (C b W)T C (5.12-1) 

C b w depends only on a and 8; signals representing both these angles 

are available in the digital computer on A-D lines. Therefore, the 

elements of C b can be obtained. Let (C b ).. represent the element 
n n i j 

in the i-th row and j-th column of C p b . From Equation (5.4-4), 

sin 9 = - (C n b ) 13 (5.12-2) 

Since - _f_ e + j , this equation can be solved for a unique value 

of e. The sign of cos 0 is always positive. 
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cos 0 = + (C n b )23 + ^ C n b ^ 33 J 


(5.12-3) 


Then ^ can be obtained from the elements in the second and third 
rows of the third column. 


sin <p = 


(C n b) 23 
cos 0 

(C n b) 33 
cos 0 


(5.12-4) 


(5.12-5) 


is obtained from the elements in the first row. 


sin ip = 


cos = 


^ C n b) 12 
cos e 

On 

COS 0 


(5.12-6) 


(5.12-7) 


Both <f> and ip lie in the range 0 to 2tt radians. These equations can 
be solved for <p and ip uniquely as long as cos e ^ 0. When cos 0 = 0, we 
have a singularity (the airplane is flying either "straight up" or 
"straight down"), and $ and ip are indeterminate. 

The body-mounted accelerometers indi cate the body-frame components 
of the acceleration due to the non-gravi tational force £. Let a^ 
represent the vector comprised of the three accelerometer readings. 


a b ^(C h W ) T F w 

— m— mw— mb— 


(5.12-8) 
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From Equation (5.6-32), 


jjf f” * P V W - C n w a n + ^ x V w (5.12-9) 


1 

m 

X w 

1 

V - C, 3 g 

Y W 


-c 23 g + R'V 


Z W 


-c 33 g - Q'V 


Signals available in the digital computer on A-D lines include 
1 w 

— X , V, a, e, Q 1 , and R'. The gravity components c 23 g and c 33 g are 
generated digitally. Therefore, can be computed and read out from 
the digital computer. 


a 


b 


<O t 


-c 23 g + R'V 
- c 3 3 g - Q'V 


(5.12-11) 


where the elements of C b w are given in Equation (5.4-7) 

The signals representing control deflections are computed from 
the autopilot control loop equations discussed in previous chapters. 

If the user desires, other computed signals can be brought out 
and displayed in addition to, or instead of, the ones listed. 
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5.13 Ranges of the Major Variables 

The inequalities below define the ranges of the major variables 
in the flight computer. 



0 < V 
0 < |V 
Oils 
Oils 
0 <. |a 
0 <. |a 
0 < |P 
0 < |P 
0 < jQ 
0 < |Q 
0 < |R 
0 < |R 


< 1 ,000 ft. /sec. 

< 200 ft. /sec. 2 

< 1 radian 

< 1 rad. /sec. 

< 1 radian 

< 1 rad. /sec. 

< 1 rad. /sec. 

2 

< 10 rad. /sec. 

< 1 rad. /sec. 

2 

< 5 rad. /sec. 

< 1 rad. /sec. 

2 

< 1 rad. /sec. 


5.14 .Summary of Equations 

In this final section we present the simulator equations as they 
are actually formulated in the hybrid computer. In some instances the 
sequence of the computations differs from that which is presented in 
the previous sections. The reason for the differences is that the 
primary objective in the writing is clarity of presentation, while 
the primary objective in the implementation is computer efficiency 
and accuracy. 
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The force equations solved in the standard analog console are 
A. Airspeed determination 


_T_ eVS 

mV 2m 


3C n 3C n 

c »/57“'5r» 


r_ 

mV 


(5.14-1) 


fy S y S 

mV cos ® + W sin 3 


X w 

V = 4- 
m 


(5.14-2) 




IT + C 13 9 - V 


(5.14-3) 


/V dt + V, = V 


(5.14-4) 




Subscript I denotes the initial value. Signals proportional to — 
and V are transmitted to the digital computer. From the digital 
computer we obtain signals proportional to frrr - C r 


pVS 3C d . pvs 3C d 
2i ’ and Ti 3T* 


mV 2m D 


B. Sideslip determination 


pVS 

Tm 


3C y 3C y 3C y 

C y + 36 3 + a/ - 6 r + 3 / 6 a 

•'o r a 


r 

mV 


(5.14-5) 


" mV sin 3 + mV cos 3 + V c 23 9 = R ‘ 


(5.14-6) 


R 1 + P sin a - R cos a = 6 


(5.14-7) 
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/e dt + 3j = 3 


(5.14-8) 


Signals proportional to R' and 3 are transmitted to the digital 


computer. From the digital computer we obtain signals proprotional 

to 2^1 r 2« and ^ 

t0 2m C y • 2m 36 ’ 2m 36, * and 


5VS 
2m 3<5 


C. Angle of attack determination 


P VS 

2m 


3C, 3C, 3 C, n 

+ 3a a + 36~ 6 e + 77KT • 27 

O Go 


3C l 

. ■ 
aC 

aC 

H 

2V 


V c 33 9 " Q’ 


(5.14-9) 


_J 

cos 3 


[Q 1 + (P cos a + R sin a) sin 3 ]= Q - a 


(5.14-10) 


Q - (Q - a) = a 


(5.14-11) 


/a dt 


a I = 


(5.14-12) 


Signals proportional to Q 1 and a are transmitted to the digital 
computer. From the digital computer we obtain signals proportional 
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The moment equations, which are also solved in the standard 
analog console, are 

A. Roll rate determination 


gVSb 
21 . 


xx 


ac ac ac ac aC 

C *„ * W 6 + 357 4 a + IT 4 S + IT V + ^7 
o a s r a 


tab 
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XX 


(5.14-13) 


C L + V * ^ + < J yy - = P 


(5.14-14) 


fP dt + Pj = P 


(5.14-15) 


is aileron tab deflection. A signal 


6 is spoiler deflection, and 6 
s a tab 

proportional to P is transmitted to the digital computer. From the 

WPL 

digital computer we obtain signals proportional to - C , 
pVSb 9C £ pVSb aC £ pVSb 9C £ pVSb 9C £ xx o 
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B. Pitch rate determination 
a C„ a c 
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(5.14-16) 
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(5.14-17) 


7 yy CM * 7 « R2 ' V 2 * (r zz " 


/Q dt + Qj = q 


(5.14-18) 


a e* . ls elevator tab deflprt-ion « „• 

„ tab . ectTon. A signal proportional to Q is 

ranstni ‘ted to the digital computer. From the digital computer we 
obtain signals proportional to c £V$c 3C m 
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(5.14-19) 

(5.14-20) 

(5.14-21) 
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6 Is rudder tab deflection. A signal proportional to R is trans- 
r tab 

mitted to the digital computer. From the digital computer we obtain 


signals proportional to C , 

C1 zz o C1 zz 


ae 


pVSb 

2l zz 


5 

a<s. 


pVSb 9C n 
2l zz 36 a 
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2I zz 
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36 . 
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9C. 


p vou ri pou 

’ 21 36 * 4 T~ 

M 1 POU 

JRb) ’ and 41 
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3 ^ 2V j ZZ 
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The non-dimensional aerodynamic coefficients C Q , C y , C^, C fc , C m , 
and C n are computed digitally. The coefficients are, in general, non- 
linear functions of several variables. Either of two methods may be 
employed to generate the coefficients. The first method, which was 
mentioned in Section 5.10, involves the use of a regression analysis 
to pre-process the available data and obtain an analytical expression, 
usually in the form of a power series, for each of the coefficients. 
From these analytic expressions we get equations which are stored 
in the digital computer and are used to solve for initial conditions 
and derivatives as indicated in Section 10. The second method of 
generating the coefficients is by means of a table look-up procedure. 
The choice of method depends largely on the form of the available 
data. For the KC-135 simulation the regression analysis was used. 

Below we indicate the nature of the output of the regression runs, 
and also the equations used in the digital simulation. 
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Regression analysis results in the following functions. 


C D = C D ( O. M, 6 f , T, S, 6 $b , 6 a , 6 S , B. •••) 
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(5.14-22) 

(5.14-23) 

(5.14-24) 

(5.14-25) 

(5.14-26) 

(5.14-27) 

(5.14-28) 

(5.14-29) 

(5.14-30) 

(5.14-31) 
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(5.14-32) 
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(5.14-33) 

(5.14-34) 

(5.14-35) 


in Equation 5.14-22), 6 SB is speed brake deflection, f g in 

Equations (5.14-28) to (5.14-35) refer to functions of the designated 
independent variables. 

From these functions we get analytic expressions for the initial 
condition functions that are stored as part of the digital simulator 
program. 
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(5.14-36) 

(5.14-37) 

(5.14-38) 
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(5.14-39) 
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a 


(5.14-40) 
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(5.14-41) 


We also obtain analytic expressions for all of the partial derivatives 
in the above equations. The partial derivatives are stored along with 
the initial condition functions in the digital simulator program. 

At the beginning of each sample period, up-dated values of all 
the variables on the right-hand sides of Equations (5.14-22) to 
(5.14-35) are made available in the digital computer. The initial 
condition functions and derivatives are evaluated digitally, and the 
results are transmitted to the standard analog console in the form 
described in the discussion of the force equations and the moment 
equations at the beginning of this section. 

Next we turn to the determination of attitude. The signals 
needed in the digital computer from the analog computer are those 
proportional to the angular velocity components P', Q ' , R'. Q' is 
computed from Equation (5.14-9), R' from Equation (5.14-6). P' is 
obtained from the following equation: 


(P cos a + R sin a) cos 8 + (Q - a) sin 6 = P ' (5.14-42) 


The first digital computation is that of the new rates of change of 
six of the nine direction cosines comprising the transformation 
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matrix C p w . Wi th subscripts o and n now being used to designate "old" 
and "new" data. 


C-. ~ = R c«<) ~ Q_ 

13 n " 23 o " 33 o 

23 n n 33 o n 13 o 

c 33 = Q n c 13 ‘ P n c 23 n 
n o o 

c 12 = R n c 22 " Q n c 32 
n o o 

c 22 = P n c 32 * R n c 12 ft 
n o o 

c 32 = Q n c 12 ' P n c 22 n 
n o o 

Using the new rates, we integrate 
values of the direction cosines. 


(5.14-43) 

(5.14-44) 

(5.14-45) 

(5.14-46) 

(5.14-47) 

(5.14-48) 

digitally to get the "approximate" 


c 13 = °- 01 (c 13 n + c 13 ^ + c 13 
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J n J o n J o 


c 33 = 0-01 ^ c 33 + ^33 ) + ^33 
n 0 n 0 


(5.14-49) 

(5.14-50) 

(5.14-51) 
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(5.14-52) 


2 12 = 0.01 (c 12 + c 12 ) + c 12 
n o n o 


c 22 =0.01 (c 22 + c 22 ) + c 22 
n o n o 


(5.14-53) 


c 32 = 0,01 ^32 + ^32 ^ + ^32. 


(5.14-54) 


n 


n 


The correction factor for the elements in the third column is 


k = i (3 - c 2 - c 2 

k 3 2 ^ c 13 c 23 
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(5.14-55) 


The corrected elements are 
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k 3 c 13 
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(5.14-56) 
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(5.14-57) 


'33. 


k 3 c 33 


n 


(5.14-58) 


To correct the elements in the second column, we need two factors: 


k = 1 (3 - r 2 -c 2 -c 2 ) 

*2 j w c 12 c 22 c 32 ' 
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(5.14-59) 


d 23 = C 13 c 12 + c 23 c 22 + c 33 n c 23 n 
n n n n n n 


(5.14-60) 
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Then the corrected elements are 


c 12 n = k 2 

(Ci2 n - d 23 

^13 ^ 
n 

(5.14-61) 

c 22 = k 2 

(c 22 - d 23 

c 23 ^ 

(5.14-62) 

n 

n 

n 


C 32 = k 2 
n 

\ - d 23 

^33 ^ 

(5.14-63) 


The elements of the first column are obtained from those in the second 
and third columns. 
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(5.14-65) 

n 

n n 
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n n 

e 22 n 

(5.14-66) 


This completes the direction cosine computation. 

The wind-frame gravity components are then determined digitally 
and transmitted to the standard analog console. 


g x W - c 13 g (5.14-67) 

9 y W = c 23 g (5.14-68) 
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(5.14-69) 


9 2 W “ c 33 9 


Since there is no longer any ambiguity, we have eliminated the caret 
and the subscript n from the matrix elements. 

The elements of C n w are also needed to determine position. The 
components of velocity in the navigation frame are computed and then 
integrated in the digital computer. 


V - *11 v 


(5.14-70) 


V " = c V 
y C 12 v 


(5.14-71) 


V = C 1 3 V 


(5.14-72) 


With x and y denoting position north and east, respectively, of some 
earth-fixed reference point, and with h denoting altitude above that 
point. 


*n = 0 * 02V x +x o 


(5.14-73) 


*n = °- 02 V + *o 


(5.14-74) 


= -0.02 V " + h 
n z o 


(5.14-75) 
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The Euler angles are determined digitally from the elements of 
C n b . These elements are computed from C b w and C n w . First we solve for 
the elements of C b w as functions of aiind $. 


(C b w )n = cos 8 cos a (5.14-76) 
(C b w ) 12 = sin 8 (5.14-77) 
(C b W )i 3 = cos 8 sin a (5.14-78) 
( Cfa W ) 21 = " s1n 8 cos a (5.14-79) 
(C b w ) 22 = cos 8 (5.14-80) 
(C b W ) 2 3 = -sin 8 sin a (5.14-81) 
(C b W ) 3 i = -sin a (5.14-82) 
(C b W ) 32 = 0 , (5.14-83) 
( c b w ) 33 = cos a (5.14-84) 


We use Equation (5.12-1) to get the elements of C n b . 
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( C n ^11 = ^Oll C 11 + (O 2 I C 21 + (O 3 I C 31 (5.14-85) 

(C n ) 12 ■ (C b c 12 + (C b w ) 21 c 22 + (C b W ) 31 c 32 (5.14-86) 

( C n ^13 = ( C b hi c 13 + (^hl c 23 + ^Ohl c 33 (5.14-87) 

^ C n hi = ( C b h2 C 11 + ^ C b ^22 C 21 + ( C b W h2 C 31 (5.14-88) 

( C n ^22 = ^ C b h2 c 12 + ( C b .h2 c 22 + ( C b ^ 32 c 32 (5.14-89) 

^ C n *23 = ^ C b h2 c 13 + ( C b ^22 c 23 + ( C b W h2 c 33 (5.14-90) 

^ C n hi = ( C b h3 C 11 + ^ C b W h3 C 21 + ( C b W h3 C 31 (5.14-91) 

^ C n } 32 = ^ C b h3 C 12 + ^^23 c 22 + (^1^33 c 32 (5.14-92) 

^ C n h3 = ^ C bhz C 1 3 + ( C n b h3 c 23 + Ohs c 33 (5.14-93) 

Although only five of the elements of are needed for the 

Euler angle computation, all nine are computed for the sake of com- 
pleteness. Pitch angle e is now determined from 

e = -sin' 1 (C n b ) 13 (5.14-94) 
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Since the magnitude of e cannot exceed j radians, there is no 
ambiguity In the angle determination. 

cos 6 = [ (C n b ) 23 2 + (C n b ) 33 2 ] ,/2 (5.14-95) 

If cos e f 0, <j> and i/i are found from the following two pairs of 
equations: 

(5.14-96) 
(5.14-97) 
(5.14-98) 
(5.14-99) 

If cos e = 0, no computation of <p and ij> is made. 

The flight path angle y is obtaining digitally from 

y = -sin' 1 c 13 (5.14-100) 

Since y, like e, is limited to the range radians, there is no 
ambiguity in the determination of y from this equation. 

The body-frame components of the non-gravitational acceleration 
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of the center of mass are computed from the wind-frame components by 
use of the transformation matrix (C^ w )^. The equations are 

J," -- ; *" (5.14-101) 


a y W *' “ c 23 9 * R ' V 


a z W = - c 33 9 - Q' V 


, b _ fr w \ a W . /r Wi ■ W . , r W N „ W 

a x “ C b *11 a x (C b ^21 a y (C b *31 a z 


. b _ lr Wi _ w . / r w, , w , /r Wi . w 

a y ^ C b J 12 a x (C b J 22 a y (C b ^32 a z 


, b _ , r Wx . w , r W\ , w , / r a w 

a z ( C b 13 a x (C b ^23 a y ^ C b ^33 a z 


(5.14-102) 

(5.14-103) 

(5.14-104) 

(5.14-105) 

(5.14-106) 
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CHAPTER VI 


CONCLUSIONS 

The research work described in this report consisted of the 
following activities. An extensive hybrid simulation was set up to 
allow for the simulation of an aircraft equipped with a digital 
flight control system. Digital control algorithms were designed 
for a KC-135 aircraft and tested on the hybrid simulation. The 
design of an attitude reference system for use in a digital flight 
control system was studied. The question of how to take advantage 
of the computational power of a digital computer to reduce attitude 
sensor complexity and provide high reliability by tolerating sensor 
failures was addressed and several sensor configurations were 
suggested. The problem of obtaining high computational reliability 
in a system employing presently available flight rated computers was 
studied and a computer configuration was proposed. 

The following conclusions result from this work. 

(1) Digital stabilization and control of a transport aircraft such 
as the KC-135 is not difficult. Since the control computations which 
must be carried out iteratively for this class of aircraft involve 
only a small amount of arithmetic, a high iteration rate is possible 
and the effect of sampling on aircraft response may be reduced to the 
point where it is not perceptible. 
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(2) The added computational power of a digital flight control com- 
puter relative to an analog computer allows simpler sensors to be 
employed in the flight control system. The report describes how the 
directional gyro and vertical gyro could be eliminated in a digital 
flight control system if accurate rate gyros were employed. Presently 
available rate gyros suitable for this application are expensive 

and the cost saving obtained by eliminating the directional and 
vertical gyros would not be dramatic. However, eliminating these 
gyros would increase system reliability and maintainability and 
decrease the number of backup sensors needed for a high reliability 
system. 

(3) For flight control tasks, such as automatic landing, where 
extremely high reliability is required, a single presently avail- 
able flight rated digital computer would not provide sufficient 
reliability, and some form of backup computation capability would 
have to be provided. The same conclusion evidently holds for analog 
computers since analog autoland systems normally employ backup com- 
puters. A computer configuration employing three digital computers 
is recommended for these applications as the minimum cost config- 
uration which provides provable tolerance to all single computer 
failures. An alternative approach would be to design a single fault 
tolerant computer. 
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